sd-jwt-payload 0.1.1

Rust implementation of the Selective Disclosure for JWTs (SD-JWT)
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58

// Copyright 2020-2023 IOTA Stiftung
// SPDX-License-Identifier: Apache-2.0

use std::collections::BTreeMap;
use std::time::SystemTime;

use itertools::Itertools;
use serde_json::Value;

use crate::Hasher;
use serde::Deserialize;
use serde::Serialize;

/// Claims set for key binding JWT.
#[derive(Clone, Debug, Default, PartialEq, Eq, Deserialize, Serialize)]
pub struct KeyBindingJwtClaims {
  pub iat: i64,
  pub aud: String,
  pub nonce: String,
  pub sd_hash: String,
  #[serde(flatten)]
  pub properties: BTreeMap<String, Value>,
}

impl KeyBindingJwtClaims {
  pub const KB_JWT_HEADER_TYP: &'static str = " kb+jwt";

  /// Creates a new [`KeyBindingJwtClaims`].
  /// When `issued_at` is left as None, it will automatically default to the current time.
  ///
  /// # Panic
  /// When `issued_at` is set to `None` and the system returns time earlier than `SystemTime::UNIX_EPOCH`.
  pub fn new(
    hasher: &dyn Hasher,
    jwt: String,
    disclosures: Vec<String>,
    nonce: String,
    aud: String,
    issued_at: Option<i64>,
  ) -> Self {
    let disclosures = disclosures.iter().join("~");
    let sd_jwt = format!("{}~{}~", jwt, disclosures);
    let hash = hasher.encoded_digest(&sd_jwt);
    let iat = issued_at.unwrap_or(
      SystemTime::now()
        .duration_since(SystemTime::UNIX_EPOCH)
        .expect("system time error")
        .as_secs() as i64,
    );
    Self {
      iat,
      aud,
      nonce,
      sd_hash: hash,
      properties: BTreeMap::new(),
    }
  }
}