Struct JwtConfig 

#[non_exhaustive]
pub struct JwtConfig {
    pub signing_secret: String,
    pub issuer: Option<String>,
    pub access_ttl_secs: u64,
    pub refresh_ttl_secs: u64,
    pub max_per_user: usize,
    pub touch_interval_secs: u64,
    pub stateful_validation: bool,
    pub access_source: TokenSourceConfig,
    pub refresh_source: TokenSourceConfig,
}

Back-compat alias — prefer JwtSessionsConfig. YAML configuration for JWT session services.

Example

jwt:
  signing_secret: "${JWT_SECRET}"
  issuer: "my-app"
  access_ttl_secs: 900
  refresh_ttl_secs: 2592000
  max_per_user: 20
  touch_interval_secs: 300
  stateful_validation: true
  access_source:
    kind: bearer
  refresh_source:
    kind: body
    field: refresh_token

Fields (Non-exhaustive)

Non-exhaustive structs could have additional fields added in future. Therefore, non-exhaustive structs cannot be constructed in external crates using the traditional Struct { .. } syntax; cannot be matched against without a wildcard ..; and struct update syntax will not work.

signing_secret: String

HMAC secret used for signing and verifying tokens.

issuer: Option<String>

Required issuer (iss). When set, the decoder rejects tokens whose iss does not match.

access_ttl_secs: u64

Access token lifetime in seconds (default: 900 = 15 minutes).

refresh_ttl_secs: u64

Refresh token lifetime in seconds (default: 2592000 = 30 days).

max_per_user: usize

Maximum concurrent sessions per user (default: 20).

touch_interval_secs: u64

Minimum interval between session touch updates in seconds (default: 300).

stateful_validation: bool

When true, tokens are validated against the session store on every request.

access_source: TokenSourceConfig

Where to extract access tokens from incoming requests.

refresh_source: TokenSourceConfig

Where to extract refresh tokens from incoming requests.

Implementations

impl JwtSessionsConfig

pub fn new(signing_secret: impl Into<String>) -> Self

Create a JWT sessions configuration with the given HMAC signing secret.

Trait Implementations

impl Clone for JwtSessionsConfig

fn clone(&self) -> JwtSessionsConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for JwtSessionsConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for JwtSessionsConfig

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for JwtSessionsConfig

where JwtSessionsConfig: Default,

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.