1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48

use thiserror::Error;

/// An error that may occur during attenuable JWT verification.
#[derive(Debug, Error)]
pub enum Error {
    /// An error decoding or validating a JWT's claims.
    #[error("jwt error")]
    JWTError(Option<Box<dyn std::error::Error>>),
    /// An error indicating a bad algorithm for the JWT.
    #[error("invalid algorithm")]
    InvalidAlgorithm,
    /// An error indicating an invalid signature.
    #[error("invalid signature")]
    InvalidSignature,
    /// An error indicating invalid claims.
    #[error("invalid claims")]
    InvalidClaims,
    /// An error indicating invalid claim format (e.g. deserialization error).
    #[error("invalid claim format")]
    InvalidClaimFormat(Box<dyn std::error::Error>),
    /// An error indicating invalid JWT format.
    #[error("invalid jwt format")]
    InvalidJWTFormat,
    /// An error indicating invalid base64 encoding.
    #[error("invalid base64 encoding")]
    InvalidBase64Encoding(Box<dyn std::error::Error>),
    /// An error indicating that the final attenuation key in an envelope (the key that should be used to sign the envelope itself) is missing.
    #[error("missing final attenuation key")]
    MissingFinalAttenuationKey,
    /// An invalid attenuation key was encountered somewhere in the JWT chain.
    #[error("invalid attenuation key")]
    InvalidAttenuationKey(Box<dyn std::error::Error>),
    /// The envelope key was invalid.
    #[error("invalid envelope key")]
    InvalidEnvelopeKey,
    /// No key was found for the given key id.
    #[error("missing key for key id: {0:?}")]
    MissingKey(Option<String>),
    /// A JWK representing the public key for one of the attenuation keys in the JWT chain was malformed.
    #[error("malformed jwk for attenuation key")]
    MalformedAttenuationKeyJWK,
    /// Invalid key.
    #[error("invalid key")]
    InvalidKey,
}

/// Result type for verification operations.
pub type Result<R> = std::result::Result<R, Error>;