Struct Claims 

pub struct Claims<T, E = BearerTokenExtractor> {
    pub claims: T,
    /* private fields */
}

Axum extractor for validated JWT claims.

Extracts and validates JWT tokens from HTTP requests. The generic parameter T represents your claims type, and E specifies the token extraction strategy (defaults to BearerTokenExtractor).

State Setup

Use Decoder<T> directly in your application state with FromRef:

use axum::extract::FromRef;
use axum_jwt_auth::{Decoder, LocalDecoder};
use std::sync::Arc;

#[derive(Clone, FromRef)]
struct AppState {
    decoder: Decoder<MyClaims>,
}

let decoder = LocalDecoder::builder()
    .keys(keys)
    .validation(validation)
    .build()
    .unwrap();

let state = AppState {
    decoder: Arc::new(decoder),
};

Handler Examples

// Default: Extract from Authorization: Bearer <token>
async fn handler(user: Claims<MyClaims>) -> Json<MyClaims> {
    Json(user.claims)
}

// Extract from custom header
define_header_extractor!(XAuthToken, "x-auth-token");
async fn handler(user: Claims<MyClaims, HeaderTokenExtractor<XAuthToken>>) {
    // ...
}

// Extract from cookie
define_cookie_extractor!(AuthCookie, "auth_token");
async fn handler(user: Claims<MyClaims, CookieTokenExtractor<AuthCookie>>) {
    // ...
}

Fields

claims: T

The validated JWT claims payload

Trait Implementations

impl<T: Debug, E: Debug> Debug for Claims<T, E>

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<S, T, E> FromRequestParts<S> for Claims<T, E>

where Decoder<T>: FromRef<S>, S: Send + Sync, T: DeserializeOwned, E: TokenExtractor,

type Rejection = AuthError

If the extractor fails it’ll use this “rejection” type. A rejection is a kind of error that can be converted into a response.

async fn from_request_parts( parts: &mut Parts, state: &S, ) -> Result<Self, Self::Rejection>

Perform the extraction.