CheckNotBefore ensures the token was not issued in the future.

KeyID returns a key id derived from the public key.

MarshalJWK will marshal a supported public key into JWK format.

New creates a JWT key that can be used to sign and verify tokens.

UnmarshalJWK will unmarshal JWK into a crypto.PublicKey that can be used to validate signatures.

AWSOIDCVerifyParams are the params required to verify an AWS OIDC Token.

AzureTokenClaims represent a minimal set of claims that will be encoded as JWT in Azure access token and passed back to az CLI.

Claims represents public and private claims for a JWT token.

Config defines the clock and PEM encoded bytes of a public and private key that form a *jwt.Key.

JWK is a JSON Web Key, described in detail in RFC 7517.

Key is a JWT key that can be used to sign and/or verify a token.

SignParams are the claims to be embedded within the JWT token.

SignParamsJWTSVID are the parameters needed to sign a JWT SVID token.

VerifyParams are the parameters needed to pass the token and data needed to verify.

IDToken allows introspecting claims from an OpenID Connect ID Token.

JSONTime unmarshaling sourced from https://github.com/gravitational/go-oidc/blob/master/oidc.go#L295 TODO(strideynet): upstream support for `nbf` into the go-oidc lib.