Struct RemoteJwksDecoder

pub struct RemoteJwksDecoder { /* private fields */ }

Remote JWKS decoder. It fetches the JWKS from the given URL and caches it for the given duration. It uses the cached JWKS to decode the JWT tokens.

Implementations

impl RemoteJwksDecoder

pub fn new(jwks_url: String) -> Self

pub async fn refresh_keys_periodically(&self)

Refreshes the JWKS cache periodically. It runs in a loop and never returns, so it should be run in a separate tokio task using tokio::spawn. If the JWKS refresh fails after multiple attemps, it logs the error and continues. The decoder will use the stale keys until the next refresh succeeds or the universe ends, whichever comes first.

Trait Implementations

impl From<RemoteJwksDecoder> for Decoder

fn from(decoder: RemoteJwksDecoder) -> Self

Converts to this type from the input type.

impl<T> JwtDecoder<T> for RemoteJwksDecoder

where T: for<'de> DeserializeOwned,

fn decode(&self, token: &str) -> Result<TokenData<T>, Error>