Struct JwtProvider 

pub struct JwtProvider {
    pub name: String,
    pub jwks_url: String,
    pub trusted_ca_file: Option<String>,
    pub issuer: Option<String>,
    pub audience: Option<String>,
    pub algorithms: Vec<String>,
    pub refresh_secs: u64,
    pub leeway_secs: u64,
    pub consumer: Option<String>,
    pub retired_key_grace_secs: Option<u64>,
    pub stale_on_error_secs: Option<u64>,
}

One JWT verification provider (DW-019).

Fields

name: String

jwks_url: String

JWKS endpoint (http:// or https://). Keys are fetched lazily on the first Bearer request, refreshed after refresh_secs, and re-fetched on an unknown kid (key rotation mid-flight).

trusted_ca_file: Option<String>

Path to a PEM file of CA certificates the JWKS fetcher trusts for its https:// connection INSTEAD of the default public (webpki) root set (#121): for JWKS endpoints served over TLS by a private CA. The file may carry several certificates (a typical CA bundle). Only meaningful with an https:// jwks_url — no TLS is negotiated toward an http:// endpoint, so validation rejects that combination. The file must exist and be readable at config compile time; validation names this field otherwise.

issuer: Option<String>

Required token issuer (iss claim). Absent: any issuer accepted.

audience: Option<String>

Required audience (aud claim). Audience is validated ONLY when this is configured (#124, maintainer decision): a provider without an audience ACCEPTS tokens that carry any (or no) aud claim — aud is not interpreted unless the provider names one. All other validations (exp, nbf, iss when configured, the algorithm allowlist) are identical either way.

algorithms: Vec<String>

Allowed signature algorithms (default ["RS256", "ES256"]). none and HMAC (HS*) algorithms are never allowed implicitly — they must not appear in this list; validation rejects them (asymmetric verification only: the gateway holds no shared secrets with issuers).

refresh_secs: u64

JWKS cache staleness bound in seconds (default 300): a cached key set older than this is refreshed before use.

leeway_secs: u64

exp/nbf clock-skew leeway in seconds (default 30).

consumer: Option<String>

Consumer this provider’s tokens authenticate. Absent: the token’s iss claim is matched against consumers’ jwt credentials.

retired_key_grace_secs: Option<u64>

How long a key REMOVED from a fresh JWKS fetch keeps verifying (DW-046), in seconds (default 86400 = 24 h; 0 disables). The dual-validity window for JWKS rotation: issuers drop the old key from their JWKS the moment the new one appears, while previously-issued tokens still carry the old kid — during this grace the gateway honors the immediately-previous key set for kids the fresh set no longer carries. Only ONE previous set is retained (rotation is one step at a time). Validation caps the value at 7 days (604800).

stale_on_error_secs: Option<u64>

How long to serve stale (cached) keys after a JWKS fetch failure (SEC-12, #215), in seconds (default: same as refresh_secs, capped at 300). When a JWKS fetch fails, the cached key set keeps serving for this duration before a new fetch is attempted, so a transient JWKS provider outage does not cascade into auth failures. 0 disables stale-on-error (a fetch failure surfaces immediately when the cache is empty; when the cache is non-empty the existing degraded-mode behavior applies).

Implementations

impl JwtProvider

pub fn retired_key_grace_secs(&self) -> u64

retired_key_grace_secs resolved to its effective value (default 86 400; the DW-046 dual-validity window).

pub fn stale_on_error_secs(&self) -> u64

stale_on_error_secs resolved to its effective value (SEC-12, #215): the default is min(refresh_secs, 300) — a failed fetch backs off for at most one refresh interval (capped at 5 min) so a down JWKS endpoint does not chain every Bearer request through a doomed fetch attempt.

Trait Implementations

impl Clone for JwtProvider

fn clone(&self) -> JwtProvider

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for JwtProvider

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for JwtProvider

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl JsonSchema for JwtProvider

fn schema_name() -> Cow<'static, str>

The name of the generated JSON Schema.

fn schema_id() -> Cow<'static, str>

Returns a string that uniquely identifies the schema produced by this type.

fn json_schema(generator: &mut SchemaGenerator) -> Schema

Generates a JSON Schema for this type.

fn inline_schema() -> bool

Whether JSON Schemas generated for this type should be included directly in parent schemas, rather than being re-used where possible using the $ref keyword.

impl PartialEq for JwtProvider

fn eq(&self, other: &JwtProvider) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for JwtProvider

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for JwtProvider