Struct OperatorJwt 

pub struct OperatorJwt {
    pub issuer: String,
    pub subject_operator: String,
    pub name: String,
    pub issued_at: u64,
    pub expires: Option<u64>,
    pub signing_keys: Vec<String>,
    pub account_server_url: String,
    pub system_account: String,
    pub claims: OperatorClaims,
}

A NATS operator JWT to be signed by its operator key (usually self-signed: iss == sub). Same signing_input/assemble split as the others.

Fields

issuer: String

Issuer = the operator public NKey (O…) signing the token.

subject_operator: String

Subject = the operator public NKey (O…) the JWT describes (self-signed operators set this equal to issuer).

name: String

Human-readable operator name (the name claim).

issued_at: u64

Issued-at time (iat), Unix seconds.

expires: Option<u64>

Optional expiry (exp), Unix seconds; None mints a non-expiring token.

signing_keys: Vec<String>

Operator signing keys (O…). Used only when OperatorClaims::signing_keys is empty.

account_server_url: String

The account-resolver / account-server URL (empty = omitted). Used only when OperatorClaims::account_server_url is empty.

system_account: String

The system account public NKey (A…, empty = omitted). Used only when OperatorClaims::system_account is empty.

claims: OperatorClaims

Additional operator claim fields from nats-io/jwt v2.

Implementations

impl OperatorJwt

pub fn signing_input(&self) -> Result<String, Error>

Produce the JWS signing input (base64url(header).base64url(claims)).

Errors

Error::Json if claim serialization fails.