Struct aliri_oauth2::Authority

pub struct Authority { /* private fields */ }

An authority backed by a potentially dynamic JSON Web Key Set (JWKS) held by a remote source

Implementations

impl Authority

pub fn new(jwks: Jwks, validator: CoreValidator) -> Self

Constructs a new JWKS authority from an existing JWKS

pub async fn new_from_url( jwks_url: String, validator: CoreValidator ) -> Result<Self, Error>

Available on crate feature reqwest only.

Constructs a new JWKS authority from a URL

pub fn spawn_refresh(&self, interval: Duration)

Available on crate feature tokio only.

A non-terminating future that will automatically refresh the JWKS using the configured interval

pub async fn refresh(&self) -> Result<(), Error>

Available on crate feature reqwest only.

Refreshes the JWKS from the remote URL

No retries are attempted. If the attempt to refresh the JWKS from the remote URL fails, no change is made to the internal JWKS.

pub fn set_jwks(&self, jwks: Jwks)

Updates the JWKS associated with the internal state

pub fn verify_token<T>( &self, token: &JwtRef, policy: &ScopePolicy ) -> Result<T, AuthorityError>

where T: for<'de> Deserialize<'de> + HasScope + CoreClaims,

Authenticates the token and checks access according to the policy

Errors

Returns an error if the token is invalid or is not authorized by the policy

Trait Implementations

impl Clone for Authority

fn clone(&self) -> Authority

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Authority

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.