Struct KeyResolver 

pub struct KeyResolver { /* private fields */ }

This struct provides methods to resolve JWT decoding keys from various sources.

The KeyResolver is responsible for fetching and caching JSON Web Keys (JWK) from OpenID Connect providers. It supports:

1. OpenID Connect Discovery via the standard .well-known/openid-configuration endpoint
2. Direct retrieval from the .well-known/jwks.json endpoint as a fallback
3. Caching of retrieved keys to minimize network requests

Example usage:

let resolver = KeyResolver::new()
    .with_jwks_ttl(Duration::from_secs(1800));  // 30 minute cache TTL

let jwt = Jwt::builder()
    .issuer("https://your-oidc-provider.com")
    .key_resolver(resolver)
    .build()?;

Implementations

impl KeyResolver

pub fn new() -> Self

Create a new KeyResolver with default settings

pub fn with_jwks(jwks: JwkSet) -> Self

pub fn with_jwks_ttl(self, ttl: Duration) -> Self

Set the default TTL for cached JWKS

pub async fn resolve_key( &self, issuer: &str, token_header: &Header, ) -> Result<DecodingKey, AuthError>

Resolve a decoding key from various sources

This function will attempt to resolve the key in the following order:

1. If a decoding key is already provided, return it
2. If a kid (Key ID) is specified in the token header, fetch the key from the JWKS endpoint
3. If no kid is specified, use the first suitable key from the JWKS endpoint

Arguments

• issuer - The token issuer URL
• token_header - The JWT header containing the algorithm and key ID (if available)

pub fn get_cached_key( &self, issuer: &str, token_header: &Header, ) -> Result<DecodingKey, AuthError>

Check the cache for a JWKS entry

Trait Implementations

impl Debug for KeyResolver

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for KeyResolver

fn default() -> Self

Returns the “default value” for a type.