Make set_issuer and set_audience require aud, iss claims

benches/jwt.rs

@@ -41,7 +41,7 @@ fn bench_decode(c: &mut Criterion) {
             decode::<Claims>(
                 black_box(token),
                 black_box(&key),
-                black_box(&Validation::new(Algorithm::HS256)),
+                black_box(&Validation::new()),
             )
         })
     });

examples/auth0.rs

@@ -22,9 +22,10 @@ fn main() -> Result<(), Box<dyn std::error::Error>> {
     };
 
     let validation = {
-        let mut validation = Validation::new(header.alg);
-        validation.set_audience(&["https://dev-duzyayk4.eu.auth0.com/api/v2/"]);
-        validation.validate_exp = false;
+        let validation = Validation::new()
+            .with_exp(false, false)
+            .with_algorithm(header.alg)
+            .with_audience(&["https://dev-duzyayk4.eu.auth0.com/api/v2/"]);
         validation
     };
 

examples/custom_header.rs

@@ -36,7 +36,7 @@ fn main() {
     let token_data = match decode::<Claims>(
         &token,
         &DecodingKey::from_secret(key),
-        &Validation::new(Algorithm::HS512),
+        &Validation::new().with_algorithm(Algorithm::HS512),
     ) {
         Ok(c) => c,
         Err(err) => match *err.kind() {

examples/custom_time.rs

@@ -88,7 +88,7 @@ mod jwt_numeric_date {
             let decoded = decode::<Claims>(
                 &token,
                 &DecodingKey::from_secret(SECRET.as_ref()),
-                &Validation::new(Algorithm::HS256),
+                &Validation::new().with_algorithm(Algorithm::HS256),
             )
             .expect("Failed to decode token");
 
@@ -103,7 +103,7 @@ mod jwt_numeric_date {
             let decode_result = decode::<Claims>(
                 &overflow_token,
                 &DecodingKey::from_secret(SECRET.as_ref()),
-                &Validation::new(Algorithm::HS256),
+                &Validation::new().with_algorithm(Algorithm::HS256),
             );
 
             assert!(decode_result.is_err());
@@ -124,7 +124,7 @@ mod jwt_numeric_date {
             let decoded = decode::<Claims>(
                 &token,
                 &DecodingKey::from_secret(SECRET.as_ref()),
-                &Validation::new(Algorithm::HS256),
+                &Validation::new().with_algorithm(Algorithm::HS256),
             )
             .expect("Failed to decode token")
             .claims;
@@ -152,7 +152,7 @@ fn main() -> Result<(), Box<dyn std::error::Error>> {
     let token_data = jsonwebtoken::decode::<Claims>(
         &token,
         &DecodingKey::from_secret(SECRET.as_ref()),
-        &Validation::new(Algorithm::HS256),
+        &Validation::new().with_algorithm(Algorithm::HS256),
     )?;
 
     println!("token data:\n{:#?}", &token_data);

examples/ed25519.rs

@@ -30,7 +30,7 @@ fn main() {
     let token =
         encode(&jsonwebtoken::Header::new(Algorithm::EdDSA), &claims, &encoding_key).unwrap();
 
-    let validation = Validation::new(Algorithm::EdDSA);
+    let validation = Validation::new().with_algorithm(Algorithm::EdDSA);
     let _token_data = decode::<Claims>(&token, &decoding_key, &validation).unwrap();
 }
 
@@ -69,7 +69,7 @@ mod tests {
             encode(&jsonwebtoken::Header::new(Algorithm::EdDSA), &claims, &jot.encoding_key)
                 .unwrap();
 
-        let validation = Validation::new(Algorithm::EdDSA);
+        let validation = Validation::new().with_algorithm(Algorithm::EdDSA);
         let token_data = decode::<Claims>(&token, &jot.decoding_key, &validation).unwrap();
         assert_eq!(token_data.claims.sub, "test");
     }

examples/validation.rs

@@ -24,10 +24,10 @@ fn main() {
         Err(_) => panic!(), // in practice you would return the error
     };
 
-    let mut validation = Validation::new(Algorithm::HS256);
-    validation.sub = Some("b@b.com".to_string());
-    validation.set_audience(&["me"]);
-    validation.set_required_spec_claims(&["exp", "sub", "aud"]);
+    let validation = Validation::new()
+        .with_algorithm(Algorithm::HS256)
+        .with_subject("b@b.com".to_string())
+        .with_audience(&["me"]);
     let token_data = match decode::<Claims>(&token, &DecodingKey::from_secret(key), &validation) {
         Ok(c) => c,
         Err(err) => match *err.kind() {

src/decoding.rs

@@ -270,7 +270,7 @@ impl TryFrom<&Jwk> for DecodingKey {
 ///
 /// let token = "a.jwt.token".to_string();
 /// // Claims is a struct that implements Deserialize
-/// let token_message = decode::<Claims>(&token, &DecodingKey::from_secret("secret".as_ref()), &Validation::new(Algorithm::HS256));
+/// let token_message = decode::<Claims>(&token, &DecodingKey::from_secret("secret".as_ref()), &Validation::new().with_algorithm(Algorithm::HS256));
 /// ```
 pub fn decode<T: DeserializeOwned>(
     token: impl AsRef<[u8]>,