CheckNotBefore ensures the token was not issued in the future.

GenerateKeyPair generates and return a PEM encoded private and public key in the format used by this package.

MarshalJWK will marshal a supported public key into JWK format.

New creates a JWT key that can be used to sign and verify tokens.

UnmarshalJWK will unmarshal JWK into a crypto.PublicKey that can be used to validate signatures.

AWSOIDCVerifyParams are the params required to verify an AWS OIDC Token.

AzureTokenClaims represent a minimal set of claims that will be encoded as JWT in Azure access token and passed back to az CLI.

Claims represents public and private claims for a JWT token.

Config defines the clock and PEM encoded bytes of a public and private key that form a *jwt.Key.

JWK is a JSON Web Key, described in detail in RFC 7517.

Key is a JWT key that can be used to sign and/or verify a token.

SignParams are the claims to be embedded within the JWT token.

VerifyParams are the parameters needed to pass the token and data needed to verify.

JSONTime unmarshaling sourced from https://github.com/gravitational/go-oidc/blob/master/oidc.go#L295 TODO(strideynet): upstream support for `nbf` into the go-oidc lib.