tokenkit 1.0.0

Type-safe JWT encode/decode for Rust: configurable validation, secret rotation, key rotation, and revocation support
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39

/// Extract a Bearer token from an Authorization header value.
///
/// Expects the format `"Bearer <token>"`. Returns `None` if the
/// header doesn't match.
///
/// # Example
///
/// ```rust
/// use tokenkit::extractors::extract_bearer_token;
///
/// assert_eq!(extract_bearer_token("Bearer abc123"), Some("abc123".to_string()));
/// assert_eq!(extract_bearer_token("Basic abc123"), None);
/// ```
pub fn extract_bearer_token(authorization: &str) -> Option<String> {
    authorization
        .strip_prefix("Bearer ")
        .map(|t| t.trim().to_string())
        .filter(|t| !t.is_empty())
}

/// Build a Set-Cookie header value for an HTTP-only authentication cookie.
///
/// # Example
///
/// ```rust
/// use tokenkit::extractors::build_auth_cookie;
///
/// let cookie = build_auth_cookie("session", "jwt_token_here", 3600, true);
/// assert!(cookie.contains("session=jwt_token_here"));
/// assert!(cookie.contains("HttpOnly"));
/// ```
pub fn build_auth_cookie(name: &str, value: &str, max_age_secs: i64, secure: bool) -> String {
    let mut cookie =
        format!("{name}={value}; Max-Age={max_age_secs}; Path=/; HttpOnly; SameSite=Strict");
    if secure {
        cookie.push_str("; Secure");
    }
    cookie
}