Enum SigningKey 

#[non_exhaustive]
pub enum SigningKey {
    Hs256(Zeroizing<Vec<u8>>),
    Hs384(Zeroizing<Vec<u8>>),
    Hs512(Zeroizing<Vec<u8>>),
    Rs256Pem(String),
    Rs384Pem(String),
    Rs512Pem(String),
    Rs256Components {
        n: String,
        e: String,
    },
}

Signing key for JWT signature verification.

Supports both symmetric (HS256) and asymmetric (RS256/RS384/RS512) algorithms.

Variants (Non-exhaustive)

Non-exhaustive enums could have additional variants added in future. Therefore, when matching against variants of non-exhaustive enums, an extra wildcard arm must be added to account for any future variants.

Hs256(Zeroizing<Vec<u8>>)

HMAC-SHA256 symmetric key.

Use for internal services where the same secret is shared between token issuer and validator.

Hs384(Zeroizing<Vec<u8>>)

HMAC-SHA384 symmetric key.

Hs512(Zeroizing<Vec<u8>>)

HMAC-SHA512 symmetric key.

Rs256Pem(String)

RSA public key in PEM format (RS256 algorithm).

Use for external identity providers. The public key is used to verify tokens signed with the provider’s private key.

Rs384Pem(String)

RSA public key in PEM format (RS384 algorithm).

Rs512Pem(String)

RSA public key in PEM format (RS512 algorithm).

Rs256Components

RSA public key components (n, e) for RS256.

Use when receiving keys from JWKS endpoints.

Fields

n: String

RSA modulus (n) in base64url encoding

e: String

RSA exponent (e) in base64url encoding

Implementations

impl SigningKey

pub fn hs256(secret: &str) -> Self

Create an HS256 signing key from a secret string.

pub fn hs256_bytes(secret: &[u8]) -> Self

Create an HS256 signing key from raw bytes.

pub fn rs256_pem(pem: &str) -> Self

Create an RS256 signing key from PEM-encoded public key.

pub fn rs256_components(n: &str, e: &str) -> Self

Create an RS256 signing key from RSA components.

This is useful when parsing JWKS responses.

pub const fn algorithm(&self) -> Algorithm

Get the algorithm for this signing key.

Trait Implementations

impl Clone for SigningKey

fn clone(&self) -> SigningKey

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SigningKey

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.