Struct JwksCache 

pub struct JwksCache { /* private fields */ }

Fetches and caches Google’s public keys used to verify Firebase ID tokens.

Concurrent lookups that miss the cache at the same time (e.g. a burst of verify_id_token calls right after Google rotates its signing keys) share a single in-flight refresh rather than each issuing their own HTTP request: an internal lock is held for the duration of the fetch, so callers that arrive while a refresh is already underway simply wait for it to finish and then re-check the now-populated cache.

Implementations

impl JwksCache

pub fn new(http: HttpClient) -> Self

Creates a cache pointed at the standard securetoken JWKS endpoint.

pub async fn public_key( &self, kid: &str, ) -> Result<(String, String), TokenVerificationError>

Returns the RSA public key components (n, e, base64url-encoded) for the given key id, fetching or refreshing the cache as needed.