Struct IssuerTrust 

pub struct IssuerTrust { /* private fields */ }

One trusted issuer and the keys that may speak for it. Cheap to clone.

Implementations

impl IssuerTrust

pub fn pinned( issuer: impl Into<String>, key: PasetoV4PublicVerifier, ) -> IssuerTrust

Trust issuer as whatever key signs.

pub fn key_set(issuer: impl Into<String>, keys: KeySetVerifier) -> IssuerTrust

Trust issuer through a JWKS key set: the signing key must be issuer-role and owned by issuer.

pub fn issuer(&self) -> &str

pub fn export(&self) -> TrustDoc

The keys this trust verifies with right now, as a persistable document. A JWKS-cache-backed trust exports the cache’s current set.

pub fn from_doc(doc: TrustDoc) -> Result<IssuerTrust, JwksError>

Rebuild a trust from export’s document. Static: it verifies with exactly the persisted keys and never fetches.

pub async fn verify<T>(&self, token: &str) -> Result<T, VerifyError>

where T: SignedArtifact,

Verify token as a T signed for this issuer.

Trait Implementations

impl Clone for IssuerTrust

fn clone(&self) -> IssuerTrust

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for IssuerTrust

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.