Struct AdvancedJarmConfig 

pub struct AdvancedJarmConfig {

    pub supported_algorithms: Vec<Algorithm>,
    pub default_token_expiry: Duration,
    pub enable_jwe_encryption: bool,
    pub supported_delivery_modes: Vec<JarmDeliveryMode>,
    pub enable_custom_claims: bool,
    pub max_custom_claims: usize,
    pub enable_response_validation: bool,
    pub jarm_issuer: String,
    pub enable_audit_logging: bool,
    pub jwe_algorithm: Option<String>,
    pub jwe_content_encryption: Option<String>,
    pub rsa_private_key_pem: Option<String>,
    pub rsa_public_key_pem: Option<String>,
    pub jwe_recipient_public_key_pem: Option<String>,
    pub jwe_recipient_private_key_pem: Option<String>,
}

Advanced JARM configuration

Fields

supported_algorithms: Vec<Algorithm>

Supported signing algorithms

default_token_expiry: Duration

Default token expiry

enable_jwe_encryption: bool

Enable JWE encryption for nested JWT

supported_delivery_modes: Vec<JarmDeliveryMode>

Supported delivery modes

enable_custom_claims: bool

Enable custom claims

max_custom_claims: usize

Maximum custom claims count

enable_response_validation: bool

Enable response validation

jarm_issuer: String

JWT issuer for JARM tokens

enable_audit_logging: bool

Enable audit logging

jwe_algorithm: Option<String>

Encryption algorithm for JWE

jwe_content_encryption: Option<String>

Content encryption algorithm

rsa_private_key_pem: Option<String>

PEM-encoded RSA private key used to sign JARM tokens.

If None, the lookup falls back to the JARM_RSA_PRIVATE_KEY_PEM environment variable before resorting to a development-only symmetric key (which triggers a visible SECURITY WARNING log entry).

rsa_public_key_pem: Option<String>

PEM-encoded RSA public key (or certificate) used to verify incoming JARM tokens.

If None, falls back to JARM_RSA_PUBLIC_KEY_PEM env var then the same symmetric dev fallback as rsa_private_key_pem.

jwe_recipient_public_key_pem: Option<String>

PEM-encoded RSA public key of the JWE recipient (the client).

When enable_jwe_encryption is true the server wraps the CEK with this key using RSA-OAEP-SHA-256. If None, falls back to the JARM_JWE_RECIPIENT_PUBLIC_KEY_PEM environment variable.

jwe_recipient_private_key_pem: Option<String>

PEM-encoded RSA private key for JWE CEK unwrapping.

Used when the server acts as a JWE recipient (rare, but required for full round-trip tests). If None, falls back to JARM_JWE_RECIPIENT_PRIVATE_KEY_PEM.

Implementations

impl AdvancedJarmConfig

pub fn builder() -> AdvancedJarmConfigBuilder

Create a builder starting from the default configuration.

Example

use auth_framework::server::oidc::oidc_advanced_jarm::AdvancedJarmConfig;

let config = AdvancedJarmConfig::builder()
    .jarm_issuer("https://auth.example.com")
    .enable_jwe_encryption(true)
    .build();

Trait Implementations

impl Clone for AdvancedJarmConfig

fn clone(&self) -> AdvancedJarmConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AdvancedJarmConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for AdvancedJarmConfig

fn default() -> Self

Returns the “default value” for a type.