token

type Config struct {
	// JWKSURL is the URL of the token service's JWKS. Exactly one of JWKSURL and JWKSFile is required.
	JWKSURL string
	// JWKSFile is a file with the JWKS, read once, for tests and for networks without access to the token service.
	JWKSFile string
	// Issuer is the required iss claim.
	Issuer string
	// Audience must be the aud claim, or one of its values.
	Audience string
	// Leeway allows for clock differences in exp and nbf.
	Leeway time.Duration
	// HTTPClient fetches the JWKS. Nil means a client with a timeout of 10 s.
	HTTPClient *http.Client
	// Now returns the current time. Nil means time.Now.
	Now func() time.Time
}

type DeniedError struct {
	Reason string
}

type Verifier struct {
	// contains filtered or unexported fields
}