Crate jwtk

JWT signing (JWS) and verification, with first-class ES256, JWK and JWK Set (JWKS) support.

Supports the HS256, RS256 and ES256 algorithms (for now). PR for others are welcome.

Supports exp and nbf validations. (Other validations will not be supported, because they are mostly application specific and can be easily implemented by applications themselves.)

See the examples folder for some examples.

Uses good old openssl for crypto. Because ring does not expose some necessary APIs, and others doesn’t seem mature enough.

Modules

es256

hs256

jwk

JWK and JWK Set.

rs256

Structs

Claims

JWT Claims.

Header

JWT header.

HeaderAndClaims

JWT header and claims.

Enums

Error

OneOrMany

Traits

SigningKey

VerificationKey

Functions

decode_without_verify

Decode token.

private_key_from_pem

Read an RSA/EC private key from PEM text representation.

public_key_from_pem

Read an RSA/EC public key from PEM text representation.

sign

Encode and sign this header and claims with the signing key.

verify

Decode and verify token.

verify_only

Decode and verify token, but do not check exp and nbf.

Type Definitions

Result