dpop-verifier 4.4.0

Lightweight DPoP proof verifier with pluggable replay store
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57

use thiserror::Error;

#[derive(Debug, Error)]
pub enum DpopError {
    #[error("Multiple DPoP headers")]
    MultipleDpopHeaders,
    #[error("Invalid DPoP header")]
    InvalidDpopHeader,
    #[error("Missing DPoP header")]
    MissingDpopHeader,
    #[error("malformed DPoP JWT")]
    MalformedJws,
    #[error("Invalid algorithm")]
    InvalidAlg(String),
    #[error("unsupported DPoP alg")]
    UnsupportedAlg(String),
    #[error("invalid DPoP signature")]
    InvalidSignature,
    #[error("bad JWK: {0}")]
    BadJwk(&'static str),
    #[error("missing claim: {0}")]
    MissingClaim(&'static str),
    #[error("Invalid method")]
    InvalidMethod,
    #[error("htm mismatch")]
    HtmMismatch,
    #[error("malformed htu")]
    MalformedHtu,
    #[error("htu mismatch")]
    HtuMismatch,
    #[error("Malformed ath")]
    AthMalformed,
    #[error("missing ath")]
    MissingAth,
    #[error("ath mismatch")]
    AthMismatch,
    #[error("iat too far in future")]
    FutureSkew,
    #[error("DPoP proof too old")]
    Stale,
    #[error("DPoP replay detected")]
    Replay,
    #[error("storage error: {0}")]
    Store(Box<dyn std::error::Error + Send + Sync>),
    #[error("Jti too long")]
    JtiTooLong,
    #[error("Use Dpop nonce")]
    UseDpopNonce { nonce: String },
    #[error("Missing Nonce")]
    MissingNonce,
    #[error("Nonce mismatch")]
    NonceMismatch,
    #[error("Nonce is stale")]
    NonceStale,
    #[error("Invalid HMAC configuration")]
    InvalidHmacConfig,
}