AnyResolver picks the first resolver that resolves claims successfully.

Authentication is the current authentication state.

Authenticator provides client authentication using a token.

KubernetesIntermediary looks up a pod by IP and reads the value of an annotation as the authentication credential.

An Injector runs after validation is complete to provide additional context to consuming applications.

An Intermediary looks up a token from a source environment.

A Resolver finds the claims associated with a token.

A Validator provides additional assertions that a resolver's claims are valid.

Raw is unprocessed token information, such as a compact JWT.