Struct UserJwt 

pub struct UserJwt {
    pub issuer: String,
    pub issuer_account: Option<String>,
    pub subject_user: String,
    pub name: String,
    pub issued_at: u64,
    pub expires: Option<u64>,
    pub permissions: UserPermissions,
}

A NATS user JWT to be signed by its issuing account key.

Fields

issuer: String

Issuer (iss) = the public NKey (A…) of the key that signs the token: either the account identity key or an account signing key.

issuer_account: Option<String>

nats.issuer_account = the owning account’s identity public NKey (A…). Set this when issuer is an account signing key, so nats-server can bind the user to its account; leave None when issuer is the account identity key itself.

subject_user: String

Subject = the user public NKey (U…) the credential is for.

name: String

Human-readable user name (the name claim).

issued_at: u64

Issued-at time (iat), Unix seconds.

expires: Option<u64>

Optional expiry (exp), Unix seconds; None mints a non-expiring token.

permissions: UserPermissions

Publish/subscribe permissions embedded in the user claims.

Implementations

impl UserJwt

pub fn signing_input(&self) -> Result<String, Error>

Produce the JWS signing input (base64url(header).base64url(claims)). Hand the bytes to the key holder, then pass the resulting 64-byte signature to assemble.