Struct HmacBlobCodec 

pub struct HmacBlobCodec { /* private fields */ }

HMAC-SHA256 blob codec. Cleartext payload, authenticated only.

Wire format: b64url(json(claims)) + "." + b64url(hmac_sha256(json(claims))). The payload is not encrypted; anyone who has the token can read the claims. Pick PasetoV4Codec when that matters.

Implementations

impl HmacBlobCodec

pub fn new(key: [u8; 32]) -> Self

Trait Implementations

impl TokenMinter for HmacBlobCodec

fn mint(&self, claims: &Claims) -> Result<String, CodecError>

impl TokenVerifier for HmacBlobCodec

fn verify_at(&self, token: &str, now: i64) -> Result<Claims, CodecError>

Verify a token against now (unix seconds). Reject if expires_at <= now.

fn verify(&self, token: &str) -> Result<Claims, CodecError>

Convenience wrapper using the system clock.