reallyme-jose 0.2.0

JOSE, JWT, JWS, and JWE helpers for ReallyMe identity.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106

// SPDX-FileCopyrightText: Copyright © 2026 ReallyMe LLC. All rights reserved
//
// SPDX-License-Identifier: Apache-2.0

use thiserror::Error;

/// Compact JWE parse, policy, and decrypt failures.
#[derive(Debug, Error)]
#[non_exhaustive]
pub enum JweError {
    /// The compact serialization did not contain five well-formed segments.
    #[error("invalid compact JWE")]
    InvalidCompact,

    /// A Base64URL segment was malformed.
    #[error("invalid compact JWE segment encoding")]
    InvalidEncoding,

    /// The protected header was not valid JSON or did not match the supported shape.
    #[error("invalid JWE protected header")]
    InvalidHeader,

    /// The key-management algorithm is not supported by the configured policy.
    #[error("unsupported JWE key-management algorithm")]
    UnsupportedKeyManagementAlgorithm,

    /// The content-encryption algorithm is not supported by the configured policy.
    #[error("unsupported JWE content-encryption algorithm")]
    UnsupportedContentEncryptionAlgorithm,

    /// A required protected-header parameter was missing.
    #[error("missing required JWE protected-header parameter")]
    MissingRequiredHeaderParameter,

    /// A protected-header parameter was present but did not match policy.
    #[error("JWE protected-header policy mismatch")]
    HeaderPolicyMismatch,

    /// The protected-header `kid` parameter did not match policy.
    #[error("JWE kid policy mismatch")]
    KidPolicyMismatch,

    /// The protected-header `typ` parameter did not match policy.
    #[error("JWE typ policy mismatch")]
    TypPolicyMismatch,

    /// The protected-header `cty` parameter did not match policy.
    #[error("JWE cty policy mismatch")]
    CtyPolicyMismatch,

    /// The protected-header Agreement PartyUInfo value did not match policy.
    #[error("JWE apu policy mismatch")]
    ApuPolicyMismatch,

    /// The protected-header Agreement PartyVInfo value did not match policy.
    #[error("JWE apv policy mismatch")]
    ApvPolicyMismatch,

    /// The encrypted-key segment is invalid for the selected key-management algorithm.
    #[error("invalid JWE encrypted-key segment")]
    InvalidEncryptedKey,

    /// The resolved content-encryption key has the wrong length.
    #[error("invalid JWE content-encryption key")]
    InvalidContentEncryptionKey,

    /// The IV or authentication tag has the wrong length for the content cipher.
    #[error("invalid JWE content-cipher input")]
    InvalidContentCipherInput,

    /// Content decryption or authentication failed.
    #[error("JWE content decryption failed")]
    Decrypt,

    /// Content encryption failed.
    #[error("JWE content encryption failed")]
    Encrypt,

    /// JWE key-agreement material was invalid.
    #[error("invalid JWE key-agreement key")]
    InvalidKeyAgreementKey,

    /// The ECDH-ES shared secret had an invalid boundary representation.
    #[error("invalid JWE shared secret")]
    InvalidSharedSecret,

    /// The ECDH-ES Concat KDF backend rejected otherwise validated inputs.
    #[error("JWE key derivation failed")]
    KeyDerivation,

    /// Secure random generation failed.
    #[error("JWE random generation failed")]
    Randomness,

    /// Decrypted payload was not valid JSON for the requested type.
    #[error("invalid JWE payload JSON")]
    InvalidPayloadJson,

    /// A checked length calculation overflowed.
    #[error("JWE input length overflow")]
    LengthOverflow,

    /// The compact JWE exceeded the configured parser input limit.
    #[error("JWE input too large")]
    InputTooLarge,
}