Enum JwtValidationError 

#[non_exhaustive]
pub enum JwtValidationError {
    Jws(JwsError),
    DisallowedAlgorithm(JwsAlgorithm),
    UnexpectedTyp {
        expected: String,
        found: Option<String>,
    },
    Payload(Error),
    KeyReference(KeyReferenceError),
    KeyResolution {
        key: Box<KeyReference>,
        source: KeyResolutionError,
    },
    Signature(VerificationError),
    KeyNotIssuers {
        issuer: Option<String>,
        key: Box<KeyReference>,
    },
    IssuerMismatch {
        expected: String,
        found: Option<String>,
    },
    AudienceMismatch {
        expected: String,
        found: Option<OneOrMany<String>>,
    },
    Expired {
        expired_at: i64,
        now: i64,
    },
    NotYetValid {
        not_before: i64,
        now: i64,
    },
    IssuedInFuture {
        issued_at: i64,
        now: i64,
    },
    MissingClaim(String),
    Claims(Error),
}

Why a JWT did not pass JwtValidator::validate.

Times are NumericDate seconds since the Unix epoch.

Variants (Non-exhaustive)

Non-exhaustive enums could have additional variants added in future. Therefore, when matching against variants of non-exhaustive enums, an extra wildcard arm must be added to account for any future variants.

Jws(JwsError)

The token is not a compact JWS this crate decodes.

DisallowedAlgorithm(JwsAlgorithm)

The header alg is not one the options accept.

UnexpectedTyp

The header typ is not the one the options require, or is missing.

Fields

expected: String

The typ required.

found: Option<String>

The typ found.

Payload(Error)

The payload is not a JSON claims set; the source is the JSON error.

KeyReference(KeyReferenceError)

The header names no key this crate can look for.

KeyResolution

The key the token names could not be resolved.

Fields

key: Box<KeyReference>

Where the token says its key is.

source: KeyResolutionError

What went wrong.

Signature(VerificationError)

The signature does not verify under the resolved key.

KeyNotIssuers

The key that signed the token does not belong to its iss.

Fields

issuer: Option<String>

The iss, if the token has one.

key: Box<KeyReference>

Where the token says its key is.

IssuerMismatch

iss is not the expected issuer.

Fields

expected: String

The issuer expected.

found: Option<String>

The iss found.

AudienceMismatch

aud does not include the expected audience.

Fields

expected: String

The audience expected.

found: Option<OneOrMany<String>>

The aud found.

Expired

The token has expired.

Fields

expired_at: i64

The exp.

now: i64

The validation time.

NotYetValid

The token is not valid yet.

Fields

not_before: i64

The nbf.

now: i64

The validation time.

IssuedInFuture

The token claims to have been issued in the future.

Fields

issued_at: i64

The iat.

now: i64

The validation time.

MissingClaim(String)

A claim the options require is missing.

Claims(Error)

The claims do not fit the type JwtValidator::validate_as reads them into; the source is the JSON error.

Trait Implementations

impl Debug for JwtValidationError

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for JwtValidationError

fn fmt(&self, __formatter: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Error for JwtValidationError

fn source(&self) -> Option<&(dyn Error + 'static)>

Returns the lower-level source of this error, if any.

fn description(&self) -> &str

👎Deprecated since 1.42.0:

use the Display impl or to_string()

fn cause(&self) -> Option<&dyn Error>

👎Deprecated since 1.33.0:

replaced by Error::source, which can support downcasting

fn provide<'a>(&'a self, request: &mut Request<'a>)

🔬This is a nightly-only experimental API. (error_generic_member_access)

Provides type-based access to context intended for error reports.

impl From<JwsError> for JwtValidationError

fn from(source: JwsError) -> Self

Converts to this type from the input type.

impl From<KeyReferenceError> for JwtValidationError

fn from(source: KeyReferenceError) -> Self

Converts to this type from the input type.

impl From<VerificationError> for JwtValidationError

fn from(source: VerificationError) -> Self

Converts to this type from the input type.