Struct JwtSection 

pub struct JwtSection {
    pub secret: String,
    pub secret_file: Option<String>,
    pub expiration_minutes: u64,
}

JWT authentication section.

appsettings keys are PascalCase: Jwt.Secret and Jwt.ExpirationMinutes (or APP__Jwt__ExpirationMinutes). ExpirationMinutes drives the lifetime of tokens minted by the default ITokenIssuer that HostBuilder::add_authentication() registers.

Where the signing secret comes from (XR-2)

First non-empty source wins, evaluated at host startup:

1. APP__Jwt__Secret / JWT_SECRET env vars — applied over the JSON during load_appsettings, so they arrive here as Secret;
2. Jwt.Secret in appsettings.json (or a code-level useOptions override);
3. Jwt.SecretFile — a path to a file holding the secret, read by rust_webx_host::auth_jwt::apply_jwt_secret_file. The file must be at least 32 bytes of non-whitespace content and, on Unix, must not grant group/other permissions (chmod 600); a missing, unreadable, too short or over-permissive file fails host startup instead of running with a broken key.

Fields

secret: String

HMAC secret for signing/verifying JWT tokens.

secret_file: Option<String>

Optional path to a file holding the HMAC secret.

Only used when Secret is empty, so an explicit secret (env or JSON) always wins and existing appsettings keep working unchanged. The framework does not create the file: provisioning the secret is an operator/installer concern. DPAPI-wrapped secrets are not supported by this release.

expiration_minutes: u64

Lifetime of freshly issued tokens, in minutes. Default: 60.

0 falls back to the default: a zero lifetime would only mint tokens that are already expired.

Trait Implementations

impl Clone for JwtSection

fn clone(&self) -> JwtSection

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for JwtSection

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Default for JwtSection

fn default() -> JwtSection

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for JwtSection

fn deserialize<__D>( __deserializer: __D, ) -> Result<JwtSection, <__D as Deserializer<'de>>::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.