Struct JwtLayer 

pub struct JwtLayer<T> { /* private fields */ }

Tower Layer that installs JWT authentication on a route.

For each request the middleware:

1. Tries each TokenSource in order; returns 401 if none yields a token.
2. Decodes and validates the token with JwtDecoder; returns 401 on failure.
3. If a Revocation backend is registered and the token has a jti, calls is_revoked(); returns 401 on revocation or backend error (fail-closed).
4. Inserts Claims<T> into request extensions for handler extraction.

The default token source is BearerSource (Authorization: Bearer <token>).

Implementations

impl<T> JwtLayer<T>

where T: DeserializeOwned + Clone + Send + Sync + 'static,

pub fn new(decoder: JwtDecoder) -> Self

Creates a JwtLayer with BearerSource as the sole token source and no revocation backend.

pub fn with_sources(self, sources: Vec<Arc<dyn TokenSource>>) -> Self

Replaces the token sources with the provided list.

Sources are tried in order; the first to return Some is used.

pub fn with_revocation(self, revocation: Arc<dyn Revocation>) -> Self

Attaches a revocation backend. Tokens with a jti claim are checked against it on every request.

Trait Implementations

impl<T> Clone for JwtLayer<T>

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<Svc, T> Layer<Svc> for JwtLayer<T>

where T: DeserializeOwned + Clone + Send + Sync + 'static,

type Service = JwtMiddleware<Svc, T>

The wrapped service

fn layer(&self, inner: Svc) -> Self::Service

Wrap the given service with the middleware, returning a new service that has been decorated with the middleware.