pub enum Algorithm {
EdDSA,
}Variants§
EdDSA
EdDSA over Ed25519 — RFC 9068 access-token profile and (post-Phase 10.1) OIDC Core 1.0 id-token profile.
Implementations§
Source§impl Algorithm
impl Algorithm
Sourcepub const ALL: &'static [Algorithm]
pub const ALL: &'static [Algorithm]
Every algorithm in the sealed signing vocabulary, in JWKS /
discovery advertisement order. The one hand-maintained enumeration
of the variants (no strum in the tree); guarded by
all_lists_every_algorithm_with_jose_wire_strings. Consumed as the
verify whitelist (VerifyConfig::{access_token, id_token}) and the
discovery id_token_signing_alg_values_supported array — so the set
PAS advertises, the set it verifies, and the vocabulary it can sign
with cannot drift apart.
Sourcepub const fn as_jose_str(self) -> &'static str
pub const fn as_jose_str(self) -> &'static str
The JOSE alg wire token (RFC 7518 §3.1 registry; EdDSA per
RFC 8037 §3.1). The sole place each algorithm’s wire string is
written — the JWKS alg member and the discovery
id_token_signing_alg_values_supported array both project from here,
and from_str parses against it.
Trait Implementations§
impl Copy for Algorithm
impl Eq for Algorithm
Source§impl FromStr for Algorithm
impl FromStr for Algorithm
Source§fn from_str(s: &str) -> Result<Self, Self::Err>
fn from_str(s: &str) -> Result<Self, Self::Err>
Parse the alg header field. Derived from ALL +
as_jose_str, so there is no second
wire-string list to keep in sync. Anything other than a known
variant’s JOSE string is rejected — family-level rejections
(HS/RS/ES) fire earlier in check_algorithm::run to give audit logs
the family signal.