Skip to content

You're viewing documentation for a pre-release version. View the latest stable version

Instance Method

verify(_:as:expectedAudience:trustedAdditionalAudiences:iteratingKeys:)

Verifies a provider identity token for this application.
func verify<Payload>(_ token: String, as _: Payload.Type = Payload.self, expectedAudience: String, trustedAdditionalAudiences: Set<String> = [], iteratingKeys: Bool = false) async throws -> Payload where Payload : JWTIdentityToken

Discussion

In addition to signature and provider claim verification, the token must name expectedAudience in aud. Any other audiences must be explicitly listed in trustedAdditionalAudiences.