Struct JwtCodec 

pub struct JwtCodec { /* private fields */ }

Reusable JWT codec for safe token encoding, header inspection, and validation.

This is the rskit-owned primitive used by JwtService. Application code can use it when it needs direct JWT operations without depending on the underlying JWT library.

Implementations

impl JwtCodec

pub fn new(config: JwtConfig) -> AppResult<Self>

Create a codec from JWT configuration and key material.

Errors

Returns an error when the issuer/audience policy or key material is invalid.

pub const fn config(&self) -> &JwtConfig

Return this codec’s immutable validation/signing configuration.

pub fn encode<C: Serialize>(&self, claims: &C) -> AppResult<String>

Sign claims using the configured algorithm and key material.

This method does not synthesize or mutate registered claims; callers own claim construction, while decode enforces the configured validation policy.

Errors

Returns an error when claim serialization or signing fails.

pub fn decode<C: DeserializeOwned>(&self, token: &str) -> AppResult<C>

Decode and validate a token using the configured validation policy.

Errors

Returns an authentication error when the token is malformed, signed with the wrong algorithm/key, expired, immature, or missing required claims.

pub fn decode_header(token: &str) -> AppResult<JwtHeader>

Decode JWT header metadata without validating the token signature.

Errors

Returns an error when the token header is malformed or uses an unsupported algorithm.