Struct JwksCache 

pub struct JwksCache { /* private fields */ }

Fetches and caches JWKS keys by kid.

Implementations

impl JwksCache

pub fn new(uri: String) -> Result<Self, String>

Create a cache for uri (keys are loaded lazily on first lookup), whose keys are refetched after DEFAULT_MAX_AGE.

Errors

The HTTPS client cannot be built: the rustls crypto provider installed for the process supports neither TLS 1.2 nor TLS 1.3.

pub fn with_max_age(self, max_age: Duration) -> Self

Refetch the keys once they are older than max_age. Refreshes stay at least a minute apart, so a shorter age behaves as one minute.

pub async fn key_for(&self, kid: &str) -> Option<VerifyingKey>

Resolve the verifying key for kid, refreshing from the JWKS endpoint once (throttled) if it is not cached or the cached keys are too old.