Struct JwksResolver 

pub struct JwksResolver { /* private fields */ }

Discovery over a Fetch, caching each issuer’s keys for ten minutes (see JwksResolver::with_ttl).

Only a server identifier is looked up. Its document must name it as issuer, exactly (RFC 8414 §3.3): otherwise a document served at someone’s well-known path by misconfigured hosting could vouch for keys that are not theirs. A jwks_uri must be on the issuer’s own origin.

Implementations

impl JwksResolver

pub fn new(fetch: Arc<dyn Fetch>) -> Self

Discovery over fetch.

pub fn with_ttl(self, ttl: Duration) -> Self

Keep each issuer’s keys for ttl instead.

pub fn clear(&self)

Forget every cached key set, as after an out-of-band rotation.

Trait Implementations

impl Debug for JwksResolver

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl KeyResolver for JwksResolver

fn jwks<'life0, 'life1, 'life2, 'async_trait>( &'life0 self, issuer: &'life1 str, dwk: &'life2 str, ) -> Pin<Box<dyn Future<Output = Result<Jwks>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait, 'life2: 'async_trait,

The keys issuer publishes through its dwk metadata document.