Module bbjwt::keystore

Keystore and key handling for bbjwt.

This file implements handling of Json Web Keys (JWK) and Json Web Keysets (JWKS).

Keys might have an expiration time; while this implementation supports updating expired keys by reloading them from the original URL, it does not provide cron-like functionality, so the user is responsible to call this update entry point at certain intervals.

Some parts of this code inspired/taken from jwksclient2.

Copyright (c) 2022 basebox GmbH, all rights reserved.

License: MIT

Structs

• BBKey
  A key as we store it in the key store, modeled after JWK.
• JWK
  JSON web key
• JWKS
  JSON Web Key Set
• KeyStore
  JWK key store.
• PublicKey

Enums

• EcCurve
  Elliptic Curves for EC and Ed/OKP keys
• KeyAlgorithm
  Key algorithms.
• KeyType
  JWK key type enum

Constants

• BASE64_ENGINE
• RELOAD_INTERVAL_FACTOR
  The lifetime of keys etc. is multiplied with this factor to determine the point in time after which the information is considered outdated. See KeyStore::set_reload_factor for more info.