Enum JwksCacheError 

pub enum JwksCacheError {
    Discovery(OidcContractError),
    Http(String),
    Validation(JwtValidationError),
    NoMatchingKey,
    NotInitialized,
    Hs256NotAllowed,
    AudienceRequired,
}

Variants

Discovery(OidcContractError)

Http(String)

Validation(JwtValidationError)

NoMatchingKey

NotInitialized

Hs256NotAllowed

The token’s header requested HS256 (symmetric) but the cache is not configured to allow it. Rejected by default to prevent HS256 algorithm confusion if the IdP’s JWKS publishes any oct/alg-less key.

AudienceRequired

No audience is configured, so the token’s aud claim cannot be bound. Failing closed prevents cross-RP token reuse (any unexpired token signed by any key in the IdP’s JWKS would otherwise be accepted).

Trait Implementations

impl Debug for JwksCacheError

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for JwksCacheError

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Error for JwksCacheError

fn source(&self) -> Option<&(dyn Error + 'static)>

Returns the lower-level source of this error, if any.

fn description(&self) -> &str

👎Deprecated since 1.42.0:

use the Display impl or to_string()

fn cause(&self) -> Option<&dyn Error>

👎Deprecated since 1.33.0:

replaced by Error::source, which can support downcasting

fn provide<'a>(&'a self, request: &mut Request<'a>)

🔬This is a nightly-only experimental API. (error_generic_member_access)

Provides type-based access to context intended for error reports.