jwt

type CustomClaims struct {
	Scope string `json:"scope"`
	jwt.StandardClaims
}

type EmptyTokenHandler libhttp.Service

type ErrorHandler func(r libhttp.Request, errMsg string) libhttp.Response

type JSONWebKeys struct {
	Kty string   `json:"kty"`
	Kid string   `json:"kid"`
	Use string   `json:"use"`
	N   string   `json:"n"`
	E   string   `json:"e"`
	X5c []string `json:"x5c"`
}

type Jwks struct {
	Keys []JSONWebKeys `json:"keys"`
}

type Option func(j *Validator)

type ScopeChecker func(tokenString string) bool

type TokenExtractor func(r libhttp.Request) (string, error)

type Validator struct {

	// If you are too lazy to scope check in your request handlers, you can do it here
	ScopeChecker ScopeChecker

	// Callback for an unsuccessful Errorcheck
	// Default value: OnScopeInsufficient
	ScopeCheckErrorHandler ErrorHandler

	// The function that will return the Key to validate the JWT.
	// It can be either a shared secret or a public key.
	// Default value: ValidationKeyGetterFromEnv()
	ValidationKeyGetter jwt.Keyfunc

	// The name of the property in the request where the user information
	// from the JWT will be stored.
	// Default value: "user"
	UserProperty string

	// The function that will be called when there's an error validating the token
	// Default value: OnError
	ErrorHandler ErrorHandler

	// The function that will be called when there is no token set
	// Default value: OnEmptyToken
	EmptyTokenHandler EmptyTokenHandler

	// A boolean indicating if the credentials are required or not
	// Default value: false
	CredentialsOptional bool

	// A function that extracts the token from the request
	// Default: FromAuthHeader (i.e., from Authorization header as bearer token)
	Extractor TokenExtractor

	// Debug flag turns on debugging output
	// Default: false
	Debug bool

	// When set, all requests with the OPTIONS method will use authentication
	// Default: false
	EnableAuthOnOptions bool

	// When set, the middleware verifies that tokens are signed with the specific signing algorithm
	// If the signing method is not constant the ValidationKeyGetter callback can be used to implement additional checks
	// Important to avoid security issues described here: https://auth0.com/blog/2015/03/31/critical-vulnerabilities-in-json-web-token-libraries/
	// Default: jwt.SigningMethodRS256
	SigningMethod jwt.SigningMethod
}