Struct JwtValidationService 

pub struct JwtValidationService<C, V> { /* private fields */ }

The server-side interceptor that validates Authorization: Bearer <token> on every incoming gRPC request.

JwtValidationService is the inner interceptor type used by JwtValidationLayer. You do not typically construct it directly; use validator_into_layer instead.

On success, the validated KeycloakClaims are inserted into the request’s extensions so that handler methods can retrieve them:

fn my_handler(&self, req: Request<MyRequest>) -> Result<Response<MyResponse>, Status> {
    let claims = req.extensions().get::<KeycloakClaims>()
        .ok_or_else(|| Status::unauthenticated("missing claims"))?;
    // claims.has_role("admin"), claims.subject(), etc.
}

On failure (missing header, expired token, wrong issuer, bad signature), returns [tonic::Status::unauthenticated] immediately, which tonic converts into a proper gRPC error response before the handler is ever called.

Trait Implementations

impl<C: Clone, V: Clone> Clone for JwtValidationService<C, V>

fn clone(&self) -> JwtValidationService<C, V>

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<C: Claims + Clone, V: TokenValidator + Send + Sync + 'static> Interceptor for JwtValidationService<C, V>

fn call(&mut self, req: Request<()>) -> Result<Request<()>, Status>

Intercept a request before it is sent, optionally cancelling it.