jwt

type Config struct {
	// signer is an interface for an opaque private key
	// that can be used for signing operations
	Signer crypto.Signer

	// Kid is the id of the key used for signing
	Kid string
}

type DefaultJWTValidator struct {
	// contains filtered or unexported fields
}

type Issuer interface {
	// IssueJWT issues a JWT and returns the JWT.
	IssueJWT(context.Context, *JWTParams) (string, error)
}

type JWTCA struct {
	// contains filtered or unexported fields
}

type JWTParams struct {
	Issuer   string
	Subject  spiffeid.TrustDomain
	Audience []string
	TTL      time.Duration
}

type Validator interface {
	// ValidateToken ValidateJWT validates a JWT and returns the claims.
	ValidateToken(context.Context, string) (*jwt.RegisteredClaims, error)
}

type ValidatorConfig struct {
	// KeyManager is the key manager used to get the public key for validating the JWT.
	KeyManager       keymanager.KeyManager
	ExpectedAudience []string
}