Crate jwtk

JWT signing (JWS) and verification, with first class JWK and JWK Set (JWKS) support.

Supports almost all JWS algorithms:

• HS256, HS384, HS512
• Ed25519
• ES256, ES384, ES512, ES256K
• RS256, RS384, RS512
• PS256, PS384, PS512

Supports exp and nbf validations. (Other validations will not be supported, because they are mostly application specific and can be easily implemented by applications.)

Supports converting public/private keys to/from PEM/JWK. Supports working with generic keys (where the algorithm is determined at runtime), i.e. SomePrivateKey/SomePublicKey.

Uses good old openssl for crypto.

See the examples folder for some examples.

Modules

• ecdsa
• eddsa
• hmac
• jwk
  JWK and JWK Set.
• rsa

Structs

• Claims
  JWT Claims.
• Header
  JWT header.
• HeaderAndClaims
  JWT header and claims.

Enums

• Error
• OneOrMany
• SomePrivateKey
  An RSA, EC or Ed25519 private key.
• SomePublicKey
  An RSA, EC or Ed25519 public.

Traits

• PrivateKeyToJwk
• PublicKeyToJwk
• SigningKey
• VerificationKey

Functions

• decode_without_verify
  Decode token.
• sign
  Encode and sign this header and claims with the signing key.
• verify
  Decode and verify token.
• verify_only
  Decode and verify token, but do not check exp and nbf.

Type Definitions

• Result