struct

KemalIdentity::JWT::Validated

Inherits Struct < Value < Object

A token that passed every check, and the claims it carried.

Principal carries a subject and nothing else by design. An OpenID Connect callback needs the rest — that is where the provider's assertions about a person live — so #validate hands back both rather than making a caller re-parse a token already verified here.

Constructors

new(principal : Principal, claims : Hash(String, JSON::Any))
Source

Instance methods

claims

Every claim in the token, including ones this shard does not interpret.

Verified, not trusted. The signature says the issuer wrote these; it says nothing about whether email_verified is true or whether groups should mean anything to your application. Read Federation::Identity before using any of them as an identifier.

Source
principal
Source