Struct JwtAuthority 

pub struct JwtAuthority<P>
where
    P: Serialize + DeserializeOwned + Clone,
{ /* private fields */ }

Authority bundle that owns an ES384 signing codec and a JWKS provider.

Construct this type once at startup with JwtAuthority::from_es384_pem and share it across handlers with Arc<JwtAuthority<P>>.

The kid embedded in every signed JWT header is guaranteed to match the kid in the published JWKS document.

Implementations

impl<P> JwtAuthority<P>

where P: Serialize + DeserializeOwned + Clone,

pub fn from_es384_pem( private_key_pem: &[u8], public_key_pem: &[u8], ) -> Result<Self>

Build an authority bundle from PEM-encoded ES384 private and public keys.

The kid is derived deterministically from the public key bytes so it is stable across restarts as long as the key pair does not change.

Errors

Returns an error if either key cannot be parsed or the JWKS provider cannot be constructed from the public key.

pub fn codec(&self) -> Arc<JsonWebToken<P>>

Returns the signing codec.

Use this to encode JWTs in login handlers.

pub fn jwks_provider(&self) -> &JwksProvider

Returns the JWKS provider.

Pass this to the JWKS publication route handler.

pub fn key_id(&self) -> &str

Returns the active signing key id (kid).

This value is identical to the kid in the published JWKS document.

Trait Implementations

impl<P> Clone for JwtAuthority<P>

where P: Serialize + DeserializeOwned + Clone + Clone,

fn clone(&self) -> JwtAuthority<P>

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<P> Debug for JwtAuthority<P>

where P: Serialize + DeserializeOwned + Clone,

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.