Struct JwksKeyStore 

pub struct JwksKeyStore { /* private fields */ }

A JWKS key store that fetches and caches public keys from a JWKS endpoint.

Keys are cached with a configurable TTL. When the cache expires, the next lookup triggers a refresh. If the endpoint is unavailable but the cache is warm, stale cached keys are used with a warning logged.

Implementations

impl JwksKeyStore

pub fn new(url: &str, ttl: Duration) -> Self

Creates a new JwksKeyStore with the given endpoint URL and cache TTL.

pub async fn fetch(&self) -> Result<(), IdentityError>

Fetches the JWKS from the configured endpoint and updates the cache.

Errors

Returns IdentityError::ProviderUnavailable if the endpoint cannot be reached.

pub async fn get_key(&self, kid: &str) -> Option<DecodingKey>

Returns the DecodingKey for the given kid, fetching from the endpoint if the cache is expired or empty.

pub async fn get_algorithm(&self, kid: &str) -> Option<String>

Returns the algorithm string for the given kid, if cached.

pub async fn is_cache_valid(&self) -> bool

Returns true if the cache has keys and is within TTL.