Struct JwksCacheConfig 

pub struct JwksCacheConfig {
    pub discovery_url: String,
    pub refresh_interval: Duration,
    pub http_timeout: Duration,
    pub issuer: Option<String>,
    pub audience: Option<String>,
    pub leeway_seconds: u64,
    pub allow_hs256: bool,
}

Fields

discovery_url: String

refresh_interval: Duration

http_timeout: Duration

issuer: Option<String>

audience: Option<String>

leeway_seconds: u64

allow_hs256: bool

Opt-in escape hatch for HS256 (symmetric) tokens. Defaults to false: this security primitive rejects HS256 by default to avoid algorithm confusion if the IdP’s JWKS publishes an oct/alg-less key. Only set to true for a trusted local/dev IdP you control.

Implementations

impl JwksCacheConfig

pub fn new(discovery_url: String) -> Self

pub fn with_audience(self, audience: impl Into<String>) -> Self

Set the expected audience. Required: the cache fails closed when no audience is configured, preventing cross-RP token reuse.

pub fn with_issuer(self, issuer: impl Into<String>) -> Self

Set the expected issuer.

pub fn allow_hs256(self, allow: bool) -> Self

Opt in to accepting HS256 (symmetric) tokens. Only for a trusted local IdP you control — see Self::allow_hs256.

Trait Implementations

impl Clone for JwksCacheConfig

fn clone(&self) -> JwksCacheConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for JwksCacheConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.