Struct Jwt 

pub struct Jwt<C> { /* private fields */ }

JWT bearer-token authentication plugin produced by Auth::jwt_hs256.

This plugin reads Authorization: Bearer <jwt> (scheme matched case-insensitively), verifies the token’s signature and standard claims against the configured key and validation, and on success inserts the decoded claims of type C as the principal. Handlers then read those claims via Principal<C>. A missing token, a bad signature, or a failed validation (e.g. an expired exp) leaves the call unauthenticated rather than erroring.

Unlike Bearer there is no verify closure: trust comes from the cryptographic signature, and the claims are deserialized directly into C. Construct it with Auth::jwt_hs256.

Type parameter

• C — the claims type, which must be serde::de::DeserializeOwned + Clone + Send + Sync + 'static. By default jsonwebtoken validates exp, so include an exp field in C.

Examples

use churust_core::{Churust, TestClient};
use churust_auth::{Auth, Principal};
use jsonwebtoken::{encode, EncodingKey, Header};
use serde::{Deserialize, Serialize};

#[derive(Serialize, Deserialize, Clone)]
struct Claims { sub: String, exp: usize }

let secret = b"shhh";
let token = encode(
    &Header::default(),
    &Claims { sub: "u1".into(), exp: 9_999_999_999 },
    &EncodingKey::from_secret(secret),
).unwrap();

let app = Churust::server()
    .install(Auth::jwt_hs256::<Claims>(secret))
    .routing(|r| {
        r.get("/who", |Principal(c): Principal<Claims>| async move { c.sub });
    })
    .build();

let res = TestClient::new(app)
    .get("/who")
    .header("authorization", &format!("Bearer {token}"))
    .send()
    .await;
assert_eq!(res.text(), "u1");

Trait Implementations

impl<C> Plugin for Jwt<C>

where C: DeserializeOwned + Clone + Send + Sync + 'static,

fn install(self: Box<Self>, app: &mut AppBuilder)

Install this plugin into the builder (register middleware, state, etc.). Consumes the boxed plugin.