1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
#[macro_export]
macro_rules! ensure {
($cond:expr, $err:expr $(,)?) => {
if !$cond {
return Err($err);
}
};
}
#[derive(Debug, thiserror::Error)]
pub enum JWTError {
#[error("Internal error: [{0}]")]
InternalError(String),
#[error("JWT compact encoding error")]
CompactEncodingError,
#[error("JWT header too large")]
HeaderTooLarge,
#[error("JWT algorithm mismatch")]
AlgorithmMismatch,
#[error("JWT key identifier mismatch")]
KeyIdentifierMismatch,
#[error("Missing JWT key identifier")]
MissingJWTKeyIdentifier,
#[error("Authentication tag didn't verify")]
InvalidAuthenticationTag,
#[error("Signature tag didn't verify")]
InvalidSignature,
#[error("Old token reused")]
OldTokenReused,
#[error("Clock drift detected")]
ClockDrift,
#[error("Token is too old")]
TokenIsTooOld,
#[error("Token not valid yet")]
TokenNotValidYet,
#[error("Token has expired")]
TokenHasExpired,
#[error("Required nonce missing")]
RequiredNonceMissing,
#[error("Required nonce mismatch")]
RequiredNonceMismatch,
#[error("Required issuer mismatch")]
RequiredIssuerMismatch,
#[error("Required issuer missing")]
RequiredIssuerMissing,
#[error("Required subject mismatch")]
RequiredSubjectMismatch,
#[error("Required subject missing")]
RequiredSubjectMissing,
#[error("Required audience missing")]
RequiredAudienceMissing,
#[error("Required audience mismatch")]
RequiredAudienceMismatch,
#[error("Unsupported RSA modulus")]
UnsupportedRSAModulus,
#[error("Invalid public key")]
InvalidPublicKey,
#[error("Invalid key pair")]
InvalidKeyPair,
#[error("At most one audience can be represented as a string instead of a set")]
TooManyAudiences,
#[error("Too many issuers to be represented as a string")]
TooManyIssuers,
#[error("Invalid certificate thumbprint")]
InvalidCertThumprint,
#[error("Not a JWT token")]
NotJWT,
#[error("Token is too long")]
TokenTooLong,
#[error(transparent)]
Codec(#[from] ct_codecs::Error),
#[error(transparent)]
Serde(#[from] serde_json::Error),
#[cfg(feature = "eddsa")]
#[error(transparent)]
Ed25519(#[from] ed25519_compact::Error),
}
impl From<&str> for JWTError {
fn from(e: &str) -> JWTError {
JWTError::InternalError(e.into())
}
}
pub type Error = JWTError;