Enum IssuerBinding 

#[non_exhaustive]
pub enum IssuerBinding {
    KeyOfIssuer,
    Any,
}

Whether the key that signed a token must belong to its issuer.

Variants (Non-exhaustive)

Non-exhaustive enums could have additional variants added in future. Therefore, when matching against variants of non-exhaustive enums, an extra wildcard arm must be added to account for any future variants.

KeyOfIssuer

The key must belong to iss (KeyReference::binds_to): a kid DID URL of the DID iss, a key of the key set of the HTTPS iss, or a key by value whose did:jwk or thumbprint is iss, or which comes with no iss at all.

Any

Any key the KeyResolver resolves is accepted, whatever iss says: for a resolver that only resolves keys the application trusts, such as an authorization server’s signing keys behind a kid that is a DID URL of a DID other than its iss URL.

Never with a resolver that returns a key the token itself carries, such as JwkResolver for a jwk header, or one that resolves any DID: the issuer binding is then the only thing tying the key to iss, and without it anyone can sign a token with their own key.

Trait Implementations

impl Clone for IssuerBinding

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for IssuerBinding

impl Debug for IssuerBinding

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for IssuerBinding

fn default() -> Self

Returns the “default value” for a type.

impl Eq for IssuerBinding

impl Hash for IssuerBinding

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl PartialEq for IssuerBinding

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for IssuerBinding