Struct PrivateKey 

pub struct PrivateKey { /* private fields */ }

Private key for JWT signing.

Stores the cryptographic key material for signing JWTs. The key data is never exposed in Debug output for security.

Implementations

impl PrivateKey

pub fn from_pem(pem: &str) -> Result<Self, ValidationError>

Create a private key from PEM-encoded string.

Arguments

• pem - PEM-encoded RSA private key

Errors

Returns ValidationError if:

• PEM format is invalid
• Key type is not RSA
• Key data is corrupted

Examples

let pem = r#"-----BEGIN RSA PRIVATE KEY-----
MIIEpAIBAAKCAQEA...
-----END RSA PRIVATE KEY-----"#;

let key = PrivateKey::from_pem(pem).expect("Invalid PEM");

pub fn from_pkcs8_der(der: &[u8]) -> Result<Self, ValidationError>

Create a private key from PKCS#8 DER-encoded bytes.

Arguments

• der - DER-encoded PKCS#8 private key bytes

Errors

Returns ValidationError if:

• DER format is invalid
• Key type is not RSA
• Key data is corrupted

impl PrivateKey

pub fn new(key_data: Vec<u8>, algorithm: KeyAlgorithm) -> Self

Create a new private key.

Arguments

• key_data - The raw key bytes (PEM or DER format)
• algorithm - The signing algorithm (typically RS256)

pub fn key_data(&self) -> &[u8]

Get the key data.

pub fn algorithm(&self) -> &KeyAlgorithm

Get the signing algorithm.

Trait Implementations

impl Clone for PrivateKey

fn clone(&self) -> PrivateKey

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for PrivateKey

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.