JwksCache

A TTL cache for a JWKS document, refetched on demand. Selects keys by kid; when a token's kid is unknown, every JWKS key is offered as a candidate.

package @safe final

class JwksCache : KeySource {

string[] keysFor(string kid);

void load(string jwksJson);

}

Members

Functions

keysFor string[] keysFor(string kid): Candidate PEM keys for a kid. Triggers a (re)fetch when stale.
load void load(string jwksJson): Populate the cache from a raw JWKS document (also the test seam).

mcp auth jwt_verifier classes

JwksCache

functions

audiences
base64UrlDecode
jwkToPem
jwkUsableForSig
jwtVerifier
parseJwks
splitScopes
tokenScopes
typAccepted
validateClaims
verifyJws
verifyToken

interfaces

KeySource

structs

Jwk
JwtVerifierConfig