pub struct JwtPluginConfig {Show 16 fields
pub session_cookie_cache: bool,
pub modulus_length: u32,
pub key_pair_configs: Vec<JwtKeyPairConfig>,
pub remote_url: Option<String>,
pub custom_sign: Option<JwtCustomSign>,
pub define_payload: Option<JwtDefinePayload>,
pub get_subject: Option<JwtGetSubject>,
pub jwks_path: String,
pub algorithm: JwtAlgorithm,
pub expiration_time: JwtExpiration,
pub issuer: Option<String>,
pub audience: Option<JwtAudience>,
pub rotation_interval: Option<Duration>,
pub grace_period: Duration,
pub disable_private_key_encryption: bool,
pub disable_setting_jwt_header: bool,
}Expand description
Local signing and discovery options.
Fields§
Use locally managed keys for JWT session cookie caches.
modulus_length: u32RSA modulus length for the primary algorithm.
key_pair_configs: Vec<JwtKeyPairConfig>Additional algorithms that explicit signing requests may provision.
remote_url: Option<String>Remote discovery URL. Disables local discovery; does not change the verifier’s adapter.
custom_sign: Option<JwtCustomSign>Application-managed signing callback. Requires remote_url.
define_payload: Option<JwtDefinePayload>Session payload callback, before default claims and subject selection.
get_subject: Option<JwtGetSubject>Session subject callback.
jwks_path: StringPublic discovery path.
algorithm: JwtAlgorithmAlgorithm used for newly generated keys.
expiration_time: JwtExpirationRelative token lifetime or absolute expiration timestamp.
issuer: Option<String>Issuer claim; defaults to the configured base URL.
audience: Option<JwtAudience>Audience claim; defaults to the configured base URL.
rotation_interval: Option<Duration>Lifetime of signing keys; no automatic rotation when absent.
grace_period: DurationKeep expired public keys discoverable for previously issued tokens.
disable_private_key_encryption: boolStore plaintext private JWKs instead of secret-encrypted JWKs.
disable_setting_jwt_header: boolSuppress the JWT header on successful session responses.