Struct JwtKeySet 

pub struct JwtKeySet { /* private fields */ }

JWT 密钥集：支持多密钥并存，以 kid 标识，实现无停机密钥轮换

Implementations

impl JwtKeySet

pub fn new( keys: HashMap<String, String>, active_kid: String, ) -> Result<Self, AuthError>

创建密钥集，校验所有密钥长度 ≥ 32 字节，active_kid 存在于 keys

pub fn rotate( &self, new_kid: String, new_secret: String, ) -> Result<(), AuthError>

轮换密钥：新增 kid 设为 active，保留旧 kid（旧令牌用旧密钥验证直至过期）

pub fn remove_kid(&self, kid: &str) -> Result<(), AuthError>

移除非 active 的 kid

pub fn active_kid(&self) -> String

获取当前 active kid

pub fn get_secret(&self, kid: &str) -> Result<String, AuthError>

按 kid 获取密钥