Struct JwtConfig 

pub struct JwtConfig {
    pub secret: String,
    pub public_key_pem: Option<String>,
    pub key_id: Option<String>,
    pub algorithm: Algorithm,
    pub access_ttl_secs: u64,
    pub refresh_ttl_secs: u64,
}

Fields

secret: String

For HMAC families (HS256/384/512): the raw shared secret. For RSA (RS*/PS*) and ECDSA (ES*) families: the PKCS#8 / SEC1 PEM private key used for signing.

public_key_pem: Option<String>

PEM-encoded public key — required for RSA/ECDSA verification and for publishing JWKS (JwtService::jwks_json). Ignored for HMAC families, where the shared secret both signs and verifies.

key_id: Option<String>

The kid (key ID) advertised in the JWT header and JWKS document. Required for OIDC so relying parties can select the right JWK.

algorithm: Algorithm

Signing algorithm. Defaults to HS256.

access_ttl_secs: u64

Lifetime of access tokens in seconds. Defaults to 900 (15 min).

refresh_ttl_secs: u64

Lifetime of refresh tokens in seconds. Defaults to 604 800 (7 days).

Trait Implementations

impl Default for JwtConfig

fn default() -> Self

Returns the “default value” for a type.