Struct RedapProvider 

pub struct RedapProvider { /* private fields */ }

A secret key that is used to generate and verify tokens.

This represents a symmetric authentication scheme, which means that the same key is used to both sign and verify the token. In the future, we will need to support asymmetric schemes too.

The key is stored unencrypted in memory.

Implementations

impl RedapProvider

pub fn from_secret_key(secret_key: SecretKey) -> Self

Create an authentication provider from a secret key.

pub fn from_secret_key_base64(secret_key: &str) -> Result<Self, Error>

Create an authentication provider from a secret key encoded as base64.

pub fn token( &self, duration: Duration, issuer: impl Into<String>, subject: impl Into<String>, permission: Permission, allowed_host: Option<&str>, ) -> Result<Jwt, Error>

Generates a new JWT token that is valid for the given duration.

It is important to note that the token is not encrypted, but merely signed by the RedapProvider. This means that its contents are readable by everyone.

If duration is None, the token will be valid forever. scope can be used to restrict the token to a specific context.

If allowed_host is provided, it is set as the allowed_hosts claim so the token can be restricted to a specific server hostname.

pub fn verify( &self, token: &Jwt, options: VerificationOptions, ) -> Result<Claims, Error>

Checks if a provided token is valid for a given scope.

Trait Implementations

impl Clone for RedapProvider

fn clone(&self) -> RedapProvider

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for RedapProvider

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.