Update Validator godoc, add additional jwt test case

jwt/jwt.go

@@ -19,7 +19,9 @@ import (
 const DefaultLeewaySeconds = 150
 
 // Validator validates JSON Web Tokens (JWT) by providing signature
-// verification and claims set validation.
+// verification and claims set validation. Validator can contain either
+// a single or multiple KeySets and will attempt to verify the JWT by iterating
+// through the configured KeySets.
 type Validator struct {
  keySets []KeySet
 }

jwt/jwt_test.go

@@ -615,6 +615,18 @@ func TestNewValidator(t *testing.T) {
  },
  },
  },
+ {
+ name: "new validator with nil keySet in keySets",
+ args: args{
+ keySets: func() []KeySet {
+ ks, err := NewJSONWebKeySet(context.Background(),
+ "https://issuer.com/"+wellKnownJWKS, "")
+ require.NoError(t, err)
+ return []KeySet{ks, nil}
+ },
+ },
+ wantErr: true,
+ },
  }
  for _, tt := range tests {
  t.Run(tt.name, func(t *testing.T) {