Struct JWEToken 

pub struct JWEToken;

Utilities for working with JWE tokens.

Implementations

impl JWEToken

pub fn build( header: &JWEHeader, encrypted_key: &[u8], iv: &[u8], ciphertext: &[u8], tag: &[u8], ) -> Result<String, Error>

Build a JWE token.

This function is called by key management implementations to create the final JWE compact serialization.

Arguments

• header - The JWE header
• encrypted_key - The encrypted CEK (or empty for direct key agreement)
• iv - The initialization vector
• ciphertext - The encrypted content
• tag - The authentication tag

pub fn build_from_claims<KeyWrapFn, CustomClaims: Serialize>( header: &JWEHeader, claims: &JWTClaims<CustomClaims>, content_encryption: ContentEncryption, key_wrap_fn: KeyWrapFn, ) -> Result<String, Error>

where KeyWrapFn: FnOnce(&[u8]) -> Result<Vec<u8>, Error>,

Build a JWE token from claims.

This is a helper that serializes claims to JSON before encryption.

pub fn decrypt<KeyUnwrapFn, CustomClaims: DeserializeOwned>( expected_alg: &str, token: &str, options: Option<DecryptionOptions>, key_unwrap_fn: KeyUnwrapFn, ) -> Result<JWTClaims<CustomClaims>, Error>

where KeyUnwrapFn: FnOnce(&JWEHeader, &[u8]) -> Result<Vec<u8>, Error>,

Parse and decrypt a JWE token.

This function is called by key management implementations to decrypt a JWE token and return the claims.

pub fn decode_metadata(token: &str) -> Result<JWETokenMetadata, Error>

Decode JWE token metadata without decrypting.

This allows inspection of the header to determine which key to use for decryption.