Struct JWEHeader 

pub struct JWEHeader {

    pub algorithm: String,
    pub encryption: String,
    pub key_id: Option<String>,
    pub token_type: Option<String>,
    pub content_type: Option<String>,
    pub ephemeral_public_key: Option<Value>,
    pub apu: Option<String>,
    pub apv: Option<String>,
    pub iv: Option<String>,
    pub tag: Option<String>,
    pub p2s: Option<String>,
    pub p2c: Option<u32>,
    pub critical: Option<Vec<String>>,
    pub certificate_chain: Option<Vec<String>>,
    pub certificate_url: Option<String>,
    pub certificate_sha1_thumbprint: Option<String>,
    pub certificate_sha256_thumbprint: Option<String>,
    pub key_set_url: Option<String>,
    pub public_key: Option<Value>,
}

JWE (JSON Web Encryption) header structure.

This header identifies the cryptographic algorithms used to encrypt the content encryption key (CEK) and the plaintext.

Fields

algorithm: String

Key management algorithm (e.g., “RSA-OAEP”, “A256KW”, “ECDH-ES+A256KW”)

encryption: String

Content encryption algorithm (e.g., “A256GCM”, “A128GCM”)

key_id: Option<String>

Key ID - identifies which key was used for encryption

token_type: Option<String>

Token type (typically “JWE” or omitted)

content_type: Option<String>

Content type - describes the media type of the encrypted content

ephemeral_public_key: Option<Value>

Ephemeral public key (for ECDH key agreement)

apu: Option<String>

Agreement PartyUInfo (for ECDH)

apv: Option<String>

Agreement PartyVInfo (for ECDH)

iv: Option<String>

Initialization vector (for AES-GCM key wrap)

tag: Option<String>

Authentication tag (for AES-GCM key wrap)

p2s: Option<String>

PBES2 salt (not used - PBES2 not supported)

p2c: Option<u32>

PBES2 iteration count (not used - PBES2 not supported)

critical: Option<Vec<String>>

Critical headers that must be understood

certificate_chain: Option<Vec<String>>

X.509 certificate chain

certificate_url: Option<String>

X.509 certificate URL

certificate_sha1_thumbprint: Option<String>

X.509 certificate SHA-1 thumbprint

certificate_sha256_thumbprint: Option<String>

X.509 certificate SHA-256 thumbprint

key_set_url: Option<String>

JWK Set URL

public_key: Option<Value>

Embedded JWK public key

Implementations

impl JWEHeader

pub fn new(algorithm: impl Into<String>, encryption: impl Into<String>) -> Self

Create a new JWE header with the specified algorithms.

pub fn with_key_id(self, key_id: impl Into<String>) -> Self

Set the key ID.

pub fn with_content_type(self, content_type: impl Into<String>) -> Self

Set the content type.

pub fn with_ephemeral_public_key(self, epk: Value) -> Self

Set the ephemeral public key (for ECDH).

Trait Implementations

impl Clone for JWEHeader

fn clone(&self) -> JWEHeader

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for JWEHeader

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for JWEHeader

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for JWEHeader

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for JWEHeader

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.