validate_token_claims

nixfleet_control_plane::auth::issuance

Function validate_token_claims 

Source 
pub fn validate_token_claims(
    claims: &TokenClaims,
    csr_cn: &str,
    csr_pubkey_fingerprint: &str,
    now: DateTime<Utc>,
) -> Result<()>
Expand description

Validates expiry, hostname-vs-CN, and pubkey fingerprint; caller verifies signature/replay.