Struct JwtSigner 

pub struct JwtSigner { /* private fields */ }

Signs JWTs using HMAC-SHA256.

Implementations

impl JwtSigner

pub fn new(secret: &[u8]) -> Self

Create a new signer from a raw HMAC secret.

pub fn sign(&self, key_id: &str, scopes: &[Scope]) -> Result<String, JwtError>

Sign a new JWT for the given API key ID and scopes.

The token expires after 24 hours.

pub fn sign_with_tenant( &self, key_id: &str, scopes: &[Scope], team_id: Option<String>, org_id: Option<String>, ) -> Result<String, JwtError>

Sign a JWT that additionally carries a tenant scope (AAASM-3139).

team_id / org_id confine a non-admin caller to its own tenant for per-tenant data endpoints. Pass None for either to leave it unscoped. The token expires after 24 hours.