Struct JwtManager 

pub struct JwtManager { /* private fields */ }

JWT manager for creating and validating tokens.

Implementations

impl JwtManager

pub fn new( secret: &[u8], access_expiry: Duration, refresh_expiry: Duration, ) -> Self

Create a new JWT manager with a secret key.

The secret should be at least 32 bytes for security.

pub fn from_hex_secret( hex_secret: &str, access_expiry: Duration, refresh_expiry: Duration, ) -> Result<Self, AuthError>

Create a JWT manager from a hex-encoded secret.

Errors

Returns error if hex decoding fails.

pub fn generate_secret() -> [u8; 32]

Generate a random 256-bit secret key.

pub fn generate_hex_secret() -> String

Generate a random secret as hex string.

pub fn create_access_token( &self, user_id: &str, username: &str, role: UserRole, ) -> Result<(String, DateTime<Utc>), AuthError>

Create an access token for a user.

Errors

Returns error if token encoding fails.

pub fn create_refresh_token( &self, user_id: &str, username: &str, role: UserRole, family_id: Option<String>, ) -> Result<(String, DateTime<Utc>), AuthError>

Create a refresh token for a user.

Errors

Returns error if token encoding fails.

pub fn create_token_pair( &self, user_id: &str, username: &str, role: UserRole, ) -> Result<TokenPair, AuthError>

Create a token pair (access + refresh) for a user.

Errors

Returns error if token creation fails.

pub fn validate_token(&self, token: &str) -> Result<Claims, AuthError>

Validate and decode a token.

Errors

Returns error if token is invalid or expired.

pub fn validate_access_token(&self, token: &str) -> Result<Claims, AuthError>

Validate an access token (must be access type).

Errors

Returns error if token is invalid, expired, or not an access token.

pub fn refresh_tokens( &self, refresh_token: &str, ) -> Result<TokenPair, AuthError>

Validate a refresh token and optionally create new tokens.

Errors

Returns error if token is invalid, expired, or not a refresh token.

pub fn extract_from_header(header: &str) -> Option<&str>

Extract token from Authorization header.

Expects format: “Bearer ”

Trait Implementations

impl Debug for JwtManager

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.