tokenkit 1.0.0

Type-safe JWT encode/decode for Rust: configurable validation, secret rotation, key rotation, and revocation support
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78

// Benchmarks run on fixed, known-good inputs; unwrap failures abort the
// bench run visibly, which is the desired behavior here.
#![allow(
    clippy::unwrap_used,
    clippy::expect_used,
    clippy::indexing_slicing,
    clippy::panic
)]

use criterion::{Criterion, criterion_group, criterion_main};
use tokenkit::claims::StandardClaims;
use tokenkit::service::{JwtAlgorithm, JwtConfig, JwtService};

fn setup_service() -> JwtService {
    let config = JwtConfig {
        algorithm: JwtAlgorithm::HS256,
        secret: "benchmark-secret-key-for-jwt-tokens".to_string(),
        issuer: Some("benchmark-app".to_string()),
        audience: Some("benchmark-audience".to_string()),
        ..Default::default()
    };
    JwtService::new(config)
}

fn bench_encode(c: &mut Criterion) {
    let service = setup_service();
    let claims = StandardClaims {
        sub: Some("user-42".to_string()),
        iss: Some("benchmark-app".to_string()),
        aud: Some("benchmark-audience".to_string()),
        role: Some("admin".to_string()),
        permissions: vec!["read".to_string(), "write".to_string()],
        ..Default::default()
    };

    c.bench_function("jwt_encode_standard_claims", |b| {
        b.iter(|| service.encode(&claims).unwrap());
    });
}

fn bench_decode(c: &mut Criterion) {
    let service = setup_service();
    let claims = StandardClaims {
        sub: Some("user-42".to_string()),
        iss: Some("benchmark-app".to_string()),
        aud: Some("benchmark-audience".to_string()),
        role: Some("admin".to_string()),
        permissions: vec!["read".to_string(), "write".to_string()],
        ..Default::default()
    };
    let token = service.encode(&claims).unwrap();

    c.bench_function("jwt_decode_standard_claims", |b| {
        b.iter(|| service.decode::<StandardClaims>(&token).unwrap());
    });
}

fn bench_roundtrip(c: &mut Criterion) {
    let service = setup_service();
    let claims = StandardClaims {
        sub: Some("user-42".to_string()),
        iss: Some("benchmark-app".to_string()),
        aud: Some("benchmark-audience".to_string()),
        role: Some("admin".to_string()),
        permissions: vec!["read".to_string(), "write".to_string()],
        ..Default::default()
    };

    c.bench_function("jwt_roundtrip_encode_decode", |b| {
        b.iter(|| {
            let token = service.encode(&claims).unwrap();
            service.decode::<StandardClaims>(&token).unwrap();
        });
    });
}

criterion_group!(benches, bench_encode, bench_decode, bench_roundtrip);
criterion_main!(benches);