Struct BrowserTokenConfig 

pub struct BrowserTokenConfig {
    pub secret: Vec<u8>,
    pub issuer: String,
    pub audience: String,
    pub access_ttl_secs: i64,
    pub refresh_ttl_secs: i64,
    pub cookie_secure: bool,
    pub same_site: SameSite,
    pub cookie_name: String,
    pub cookie_path: String,
}

Configuration for the hybrid-token authority. Secure by default: Secure cookies, SameSite=Strict, a short access TTL, and an HttpOnly refresh cookie.

Fields

secret: Vec<u8>

HS256 signing/verification secret. Must be ≥ MIN_SECRET_BYTES.

issuer: String

iss claim stamped on every token and required on verify.

audience: String

aud claim stamped on every token and required on verify.

access_ttl_secs: i64

Access-JWT lifetime, seconds. Short by design (default 15 min): the blast radius of a leaked in-memory access token is one TTL.

refresh_ttl_secs: i64

Refresh-cookie lifetime, seconds (default 30 days). Bounds how long a stolen refresh cookie is useful and sets the cookie’s Max-Age.

cookie_secure: bool

Secure attribute on the refresh cookie. Default true — the cookie must only ride HTTPS. Tests on a clear-text loopback set this false explicitly.

same_site: SameSite

SameSite attribute on the refresh cookie.

cookie_name: String

Cookie name. Default reddb_refresh.

cookie_path: String

Cookie Path — scopes which requests carry the refresh cookie. Default /auth/browser, so it reaches refresh/logout but no other endpoint ever sees it.

Implementations

impl BrowserTokenConfig

pub fn new(secret: impl Into<Vec<u8>>) -> BrowserTokenConfig

Build a config with secure defaults around an explicit secret.

Trait Implementations

impl Clone for BrowserTokenConfig

fn clone(&self) -> BrowserTokenConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for BrowserTokenConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.