Struct Jwks 

pub struct Jwks { /* private fields */ }

A set of asymmetric verification keys (an RFC 7517 JWK Set).

Built from a JWKS JSON document (from_json) or key by key (with_rsa / with_ec_p256). HMAC (HS256) secrets are not part of a JWKS — configure those directly on the JwtValidator with JwtValidator::with_hs256_secret.

Implementations

impl Jwks

pub const fn new() -> Jwks

Creates an empty key set.

pub fn from_json(json: &[u8]) -> Result<Jwks, A2aError>

Parses a standard JWK Set JSON document ({"keys":[{"kty":"RSA",...},{"kty":"EC",...}]}).

RSA keys (fields n, e) and EC/P-256 keys (fields x, y) are loaded; entries of any other kty/crv, or entries explicitly marked "use":"enc", are skipped so an encryption key is never used to verify a signature.

Errors

Returns an A2aError when the document is not valid JSON or a loaded key’s parameters are malformed.

pub fn with_rsa( self, kid: impl Into<String>, n: &str, e: &str, ) -> Result<Jwks, A2aError>

Adds an RSA verification key from base64url n and e (JWK form).

Errors

Returns an A2aError when n/e are not valid base64url.

pub fn with_ec_p256( self, kid: impl Into<String>, x: &str, y: &str, ) -> Result<Jwks, A2aError>

Adds an EC P-256 verification key from base64url x and y (JWK form).

Errors

Returns an A2aError when x/y are not valid base64url or not 32 bytes each.

Trait Implementations

impl Clone for Jwks

fn clone(&self) -> Jwks

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Jwks

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Default for Jwks

fn default() -> Jwks

Returns the “default value” for a type.