Struct AuthService 

pub struct AuthService { /* private fields */ }

Authentication service for JWT token management and password hashing.

Provides secure password hashing using Argon2id and JWT token generation/verification using HS256.

Implementations

impl AuthService

pub fn new(jwt_secret: String, access_expiry: i64, refresh_expiry: i64) -> Self

Creates a new AuthService with the given configuration.

Arguments

• jwt_secret - Secret key for signing JWTs (should be at least 32 chars)
• access_expiry - Access token validity in seconds
• refresh_expiry - Refresh token validity in seconds

pub fn with_leeway( jwt_secret: String, access_expiry: i64, refresh_expiry: i64, leeway: u64, ) -> Self

Creates a new AuthService with custom leeway for token validation.

Arguments

• jwt_secret - Secret key for signing JWTs (should be at least 32 chars)
• access_expiry - Access token validity in seconds
• refresh_expiry - Refresh token validity in seconds
• leeway - Leeway in seconds for expiration checks (0 for strict)

pub fn hash_password(&self, password: &str) -> Result<String>

Hashes a password using Argon2id.

Returns a PHC-formatted hash string.

pub fn verify_password(&self, password: &str, hash: &str) -> Result<bool>

Verifies a password against an Argon2 hash.

pub fn generate_tokens( &self, user_id: &str, email: &str, ) -> Result<TokenResponse>

Generates access and refresh tokens for a user.

pub fn verify_token(&self, token: &str) -> Result<Claims>

Verifies a JWT token and returns the claims.

pub fn verify_token_with_leeway( &self, token: &str, leeway: u64, ) -> Result<Claims>

Verifies a JWT token with a custom leeway (in seconds) for expiration checks.

The leeway accounts for clock skew between servers. Default is 60 seconds. Use leeway of 0 for strict expiration checking (e.g., in tests).

pub fn hash_token(&self, token: &str) -> String

Hashes a token using SHA256 for secure storage.