jwtjwks

type Config struct {
	// AllowedAlgorithms is mandatory and limits both JWT headers and usable JWKs.
	AllowedAlgorithms []string     `json:"allowed_algorithms"`
	HTTPClient        *http.Client `json:"-"`
	// MaxResponseBytes bounds each discovery or JWKS document (default 1 MiB).
	MaxResponseBytes int64 `json:"max_response_bytes,omitempty"`
	// MaxKeys bounds the number of keys in one JWKS document (default 32).
	MaxKeys int `json:"max_keys,omitempty"`
	// CacheTTL controls successful JWKS retention (default 15 minutes).
	CacheTTL time.Duration `json:"cache_ttl,omitempty"`
	// RefreshCooldown rate-limits repeated JWKS refresh attempts (default 5 seconds).
	RefreshCooldown time.Duration `json:"refresh_cooldown,omitempty"`
	// ClockSkew is JWT time-claim leeway (default zero).
	ClockSkew time.Duration    `json:"clock_skew,omitempty"`
	Now       func() time.Time `json:"-"`
}

type Validator struct {
	// contains filtered or unexported fields
}