dpop-verifier 4.4.0

Lightweight DPoP proof verifier with pluggable replay store
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22

use crate::DpopError;
use async_trait::async_trait;

#[derive(Debug, Clone)]
pub struct ReplayContext<'a> {
    pub jkt: Option<&'a str>,
    pub htm: Option<&'a str>,
    pub htu: Option<&'a str>,
    pub client_id: Option<&'a str>,
    pub iat: i64,
}

/// Implement this in your app for DB/Redis/etc.
/// Return Ok(true) if this jti was inserted the first time; Ok(false) if already present (replay).
#[async_trait]
pub trait ReplayStore {
    async fn insert_once(
        &mut self,
        jti_hash: [u8; 32],
        ctx: ReplayContext<'_>,
    ) -> Result<bool, DpopError>;
}