Struct AuthConfig 

pub struct AuthConfig {
    pub jwt_secret: Option<String>,
    pub jwt_algorithm: JwtAlgorithm,
    pub jwt_issuer: Option<String>,
    pub jwt_audience: Option<String>,
    pub access_token_ttl: Option<String>,
    pub refresh_token_ttl: Option<String>,
    pub jwks_url: Option<String>,
    pub jwks_cache_ttl_secs: u64,
    pub session_ttl_secs: u64,
}

Authentication configuration.

Fields

jwt_secret: Option<String>

JWT secret for HMAC algorithms (HS256, HS384, HS512). Required when using HMAC algorithms.

jwt_algorithm: JwtAlgorithm

JWT signing algorithm. HMAC algorithms (HS256, HS384, HS512) require jwt_secret. RSA algorithms (RS256, RS384, RS512) require jwks_url.

jwt_issuer: Option<String>

Expected token issuer (iss claim). If set, tokens with a different issuer are rejected.

jwt_audience: Option<String>

Expected audience (aud claim). If set, tokens with a different audience are rejected.

access_token_ttl: Option<String>

Access token lifetime (e.g., “15m”, “1h”). Used by ctx.issue_token_pair(). Defaults to “1h”.

refresh_token_ttl: Option<String>

Refresh token lifetime (e.g., “7d”, “30d”). Used by ctx.issue_token_pair(). Defaults to “30d”.

jwks_url: Option<String>

JWKS URL for RSA algorithms (RS256, RS384, RS512). Keys are fetched and cached automatically.

jwks_cache_ttl_secs: u64

JWKS cache TTL in seconds.

session_ttl_secs: u64

Session TTL in seconds (for WebSocket sessions).

Implementations

impl AuthConfig

pub fn access_token_ttl_secs(&self) -> i64

Resolved access token TTL in seconds. Parses access_token_ttl, default 3600s (1h). Minimum 1 second to prevent zero-lifetime tokens.

pub fn refresh_token_ttl_days(&self) -> i64

Resolved refresh token TTL in days. Parses refresh_token_ttl, default 30 days.

pub fn validate(&self) -> Result<()>

Validate that the configuration is complete for the chosen algorithm. Skips validation if no auth settings are configured (auth disabled).

pub fn is_hmac(&self) -> bool

Check if this config uses HMAC (symmetric) algorithms.

pub fn is_rsa(&self) -> bool

Check if this config uses RSA (asymmetric) algorithms.

Trait Implementations

impl Clone for AuthConfig

fn clone(&self) -> AuthConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuthConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for AuthConfig

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for AuthConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for AuthConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.