Struct JwtVerifierBuilder 

pub struct JwtVerifierBuilder { /* private fields */ }

Builder of JwtVerifier.

Implementations

impl JwtVerifierBuilder

pub fn jwks_uri(self, uri: impl Into<String>) -> Self

Fetches keys from this URL instead of discovering it from the issuer’s metadata.

pub fn jwks(self, document: impl Into<String>) -> Self

Uses these keys (a JWKS document, {"keys": [..]}) and never fetches any. Rotating them then requires a restart.

pub fn algorithms(self, algorithms: impl IntoIterator<Item = Algorithm>) -> Self

The accepted signature algorithms. Default: all of Algorithm::ALL.

pub fn leeway(self, leeway: Duration) -> Self

Tolerated clock difference for exp and nbf. Default: 60 s.

pub fn http_timeout(self, timeout: Duration) -> Self

Time allowed for each metadata or JWKS request. Default: 5 s.

pub fn min_refresh_interval(self, interval: Duration) -> Self

Minimum time between two key fetches triggered by tokens that name unknown keys, so forged tokens cannot make the server hammer the authorization server. Default: 30 s.

pub fn build(self) -> Result<JwtVerifier, JwtError>

Validates the settings.

Errors

Fails when the issuer or jwks_uri is not a valid URL (https, or http on localhost), the audience is empty, no algorithm is allowed, static keys contain no usable signing key, or the system’s TLS roots cannot be loaded.

Trait Implementations

impl Debug for JwtVerifierBuilder

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.