TokenValidator

class TokenValidator(secrets: List<ByteArray>, clock: Clock = SystemClock)

Validates proxy tokens received by the backend server, supporting secret rotation.

Constructors

constructor(secrets: List<ByteArray>, clock: Clock = SystemClock)

constructor(secret: ByteArray, clock: Clock = SystemClock)

fun validate(encodedToken: String, expectedServerId: String): ProxyToken

Validates encodedToken and returns parsed token claims on success.