Enum NonceMode 

pub enum NonceMode {
    Disabled,
    RequireEqual {
        expected_nonce: String,
    },
    Hmac {
        secret: SecretBox<[u8]>,
        max_age_seconds: i64,
        bind_htu_htm: bool,
        bind_jkt: bool,
        bind_client: bool,
    },
}

Variants

Disabled

RequireEqual

Require exact equality against expected_nonce

Fields

expected_nonce: String

Hmac

Stateless HMAC-based nonces: encode ts+rand+ctx and MAC it

Fields

secret: SecretBox<[u8]>

max_age_seconds: i64

bind_htu_htm: bool

bind_jkt: bool

bind_client: bool

Implementations

impl NonceMode

pub fn hmac<S>( secret: S, max_age_seconds: i64, bind_htu_htm: bool, bind_jkt: bool, bind_client: bool, ) -> Self

where S: IntoSecretBox,

Create an HMAC nonce mode with a secret that can be converted to SecretBox<[u8]>.

Accepts either a SecretBox<[u8]> or any type that can be converted to bytes (e.g., &[u8], Vec<u8>). Non-boxed types will be automatically converted to SecretBox internally.

Example

use dpop_verifier::NonceMode;
 
// With a byte array (b"..." syntax)
let mode = NonceMode::hmac(b"my-secret-key", 300, true, true, true);
 
// With a byte slice
let secret_slice: &[u8] = b"my-secret-key";
let mode = NonceMode::hmac(secret_slice, 300, true, true, true);
 
// With a Vec<u8>
let secret = b"my-secret-key".to_vec();
let mode = NonceMode::hmac(&secret, 300, true, true, true);
 
// With a SecretBox (already boxed)
use secrecy::SecretBox;
let secret_box = SecretBox::from(b"my-secret-key".to_vec());
let mode = NonceMode::hmac(&secret_box, 300, true, true, true);

Trait Implementations

impl Clone for NonceMode

fn clone(&self) -> NonceMode

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for NonceMode

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.