Struct JwtConfig 

#[non_exhaustive]
pub struct JwtConfig {
    pub secret: String,
    pub default_expiry: Option<u64>,
    pub leeway: u64,
    pub issuer: Option<String>,
    pub audience: Option<String>,
}

YAML configuration for JWT services.

Example

jwt:
  secret: "${JWT_SECRET}"
  default_expiry: 3600
  leeway: 5
  issuer: "my-app"
  audience: "api"

Fields (Non-exhaustive)

Non-exhaustive structs could have additional fields added in future. Therefore, non-exhaustive structs cannot be constructed in external crates using the traditional Struct { .. } syntax; cannot be matched against without a wildcard ..; and struct update syntax will not work.

secret: String

HMAC secret used for signing and verifying tokens.

default_expiry: Option<u64>

Default token lifetime in seconds. Applied automatically by JwtEncoder::encode() when claims.exp is None. If None, tokens without an exp are rejected by the decoder.

leeway: u64

Clock skew tolerance in seconds. Applied to both exp and nbf checks. Defaults to 0 when omitted from YAML.

issuer: Option<String>

Required issuer (iss). When set, JwtDecoder::decode() rejects tokens whose iss does not match.

audience: Option<String>

Required audience (aud). When set, JwtDecoder::decode() rejects tokens whose aud does not match.

Implementations

impl JwtConfig

pub fn new(secret: impl Into<String>) -> Self

Create a JWT configuration with the given HMAC signing secret.

Trait Implementations

impl Clone for JwtConfig

fn clone(&self) -> JwtConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for JwtConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for JwtConfig

fn default() -> JwtConfig

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for JwtConfig

where JwtConfig: Default,

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.