jwt-simple 0.12.14

Easy to use, secure, non opinionated JWT (JSON Web Tokens) implementation for Rust.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110

use ct_codecs::{Base64UrlSafeNoPadding, Encoder};
use serde::{Deserialize, Serialize};

use crate::common::*;

#[derive(Debug, Clone, Serialize, Deserialize)]
pub(crate) struct JWTHeader {
    #[serde(rename = "alg")]
    pub(crate) algorithm: String,

    #[serde(rename = "cty", default, skip_serializing_if = "Option::is_none")]
    pub(crate) content_type: Option<String>,

    #[serde(rename = "kid", default, skip_serializing_if = "Option::is_none")]
    pub(crate) key_id: Option<String>,

    #[serde(rename = "typ", default, skip_serializing_if = "Option::is_none")]
    pub(crate) signature_type: Option<String>,

    #[serde(rename = "crit", default, skip_serializing_if = "Option::is_none")]
    pub(crate) critical: Option<Vec<String>>,

    #[serde(rename = "x5c", default, skip_serializing_if = "Option::is_none")]
    pub(crate) certificate_chain: Option<Vec<String>>,

    #[serde(rename = "jku", default, skip_serializing_if = "Option::is_none")]
    pub key_set_url: Option<String>,

    #[serde(rename = "jwk", default, skip_serializing_if = "Option::is_none")]
    pub public_key: Option<String>,

    #[serde(rename = "x5u", default, skip_serializing_if = "Option::is_none")]
    pub certificate_url: Option<String>,

    #[serde(rename = "x5t", default, skip_serializing_if = "Option::is_none")]
    pub certificate_sha1_thumbprint: Option<String>,

    #[serde(rename = "x5t#S256", default, skip_serializing_if = "Option::is_none")]
    pub certificate_sha256_thumbprint: Option<String>,

    #[serde(rename = "salt", default, skip_serializing_if = "Option::is_none")]
    pub salt: Option<String>,
}

impl Default for JWTHeader {
    fn default() -> Self {
        JWTHeader {
            algorithm: "Not set".to_string(),
            content_type: None,
            key_set_url: None,
            public_key: None,
            key_id: None,
            certificate_url: None,
            certificate_chain: None,
            certificate_sha1_thumbprint: None,
            certificate_sha256_thumbprint: None,
            signature_type: Some("JWT".to_string()),
            critical: None,
            salt: None,
        }
    }
}

impl JWTHeader {
    pub(crate) fn new(algorithm: String, key_id: Option<String>) -> Self {
        JWTHeader {
            algorithm,
            key_id,
            ..Default::default()
        }
    }

    pub(crate) fn with_key_metadata(mut self, metadata: &Option<KeyMetadata>) -> Self {
        let metadata = match metadata {
            None => return self,
            Some(metadata) => metadata,
        };
        if self.key_set_url.is_none() {
            self.key_set_url = metadata.key_set_url.clone();
        }
        if self.public_key.is_none() {
            self.public_key = metadata.public_key.clone();
        }
        if self.certificate_url.is_none() {
            self.certificate_url = metadata.certificate_url.clone();
        }
        if self.certificate_sha1_thumbprint.is_none() {
            self.certificate_sha1_thumbprint = metadata.certificate_sha1_thumbprint.clone();
        }
        if self.certificate_sha256_thumbprint.is_none() {
            self.certificate_sha256_thumbprint = metadata.certificate_sha256_thumbprint.clone();
        }
        if self.salt.is_none() {
            if let Salt::Signer(salt) = &metadata.salt {
                self.salt = Some(Base64UrlSafeNoPadding::encode_to_string(salt).unwrap());
            }
        }
        self
    }

    pub(crate) fn with_options(mut self, opts: &HeaderOptions) -> Self {
        if self.signature_type.as_deref() == Some("JWT") && opts.signature_type.is_some() {
            self.signature_type = opts.signature_type.clone();
        }
        if self.content_type.is_none() && opts.content_type.is_some() {
            self.content_type = opts.content_type.clone();
        }
        self
    }
}