Struct OAuthPrivateKeyJwtOptions 

pub struct OAuthPrivateKeyJwtOptions {
    pub private_key_jwk: Option<Value>,
    pub private_key_pem: Option<String>,
    pub algorithm: Option<String>,
    pub kid: Option<String>,
    pub expires_in: Option<f64>,
}

Key material stays private; Debug deliberately never renders it. JWK takes precedence over PKCS#8 PEM. Algorithm defaults to JWK alg, then RS256; explicit algorithm and JWK alg must agree. kid overrides JWK kid.

Fields

private_key_jwk: Option<Value>

private_key_pem: Option<String>

algorithm: Option<String>

kid: Option<String>

expires_in: Option<f64>

Seconds, default 120. Negative lifetimes produce expired assertions.

Implementations

impl OAuthPrivateKeyJwtOptions

pub fn into_assertion(self) -> Result<OAuthClientAssertion, String>

Validate configuration eagerly; key import/signing occurs for each grant, matching the published getter’s construction versus request boundaries.

Errors

Rejects missing key material, unsupported algorithms, and algorithm conflicts.

Trait Implementations

impl Clone for OAuthPrivateKeyJwtOptions

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for OAuthPrivateKeyJwtOptions

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for OAuthPrivateKeyJwtOptions

fn default() -> Self

Returns the “default value” for a type.

impl OAuthClientAssertionGetter for OAuthPrivateKeyJwtOptions

fn get_client_assertion<'life0, 'async_trait>( &'life0 self, context: OAuthClientAssertionContext, ) -> Pin<Box<dyn Future<Output = Result<String, String>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait,