Struct JwtBundle

pub struct JwtBundle { /* private fields */ }

This type contains a collection of trusted JWT authorities (Public keys) for a TrustDomain.

Implementations

impl JwtBundle

pub fn new(trust_domain: TrustDomain) -> Self

Creates an empty JwtBundle for the given TrustDomain.

pub fn from_jwt_authorities( trust_domain: TrustDomain, jwt_authorities: &[u8], ) -> Result<Self, JwtBundleError>

Parses a JwtBundle from bytes representing a set of JWT authorities. The data must be a standard RFC 7517 JWTK document.

Arguments

• trust_domain - A TrustDomain to associate to the bundle.
• jwt_authorities - A slice of bytes representing a set of JWT authorities in a standard RFC 7517 JWKS document.

Errors

If the function cannot parse the bytes into a JSON WebKey Set, a JwtBundleError variant will be returned.

Examples

use spiffe::{JwtBundle, TrustDomain};

let jwt_authorities = r#"{
    "keys": [
        {
            "kty": "EC",
            "kid": "C6vs25welZOx6WksNYfbMfiw9l96pMnD",
            "crv": "P-256",
            "x": "ngLYQnlfF6GsojUwqtcEE3WgTNG2RUlsGhK73RNEl5k",
            "y": "tKbiDSUSsQ3F1P7wteeHNXIcU-cx6CgSbroeQrQHTLM"
        }
    ]
 }"#
.as_bytes();
let trust_domain = TrustDomain::new("example.org").unwrap();
let jwt_bundle = JwtBundle::from_jwt_authorities(trust_domain, jwt_authorities).unwrap();

assert!(jwt_bundle
    .find_jwt_authority("C6vs25welZOx6WksNYfbMfiw9l96pMnD")
    .is_some());

pub fn find_jwt_authority(&self, key_id: &str) -> Option<&Jwk>

Returns the [JwtAuthority] with the given key ID.

pub fn add_jwt_authority( &mut self, authority: Jwk, ) -> Result<(), JwtBundleError>

Adds a [JwtAuthority] to the bundle.

pub fn trust_domain(&self) -> &TrustDomain

Returns the TrustDomain associated to the bundle.

Trait Implementations

impl Clone for JwtBundle

fn clone(&self) -> JwtBundle

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for JwtBundle

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for JwtBundle

fn eq(&self, other: &JwtBundle) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Bundle for JwtBundle

impl Eq for JwtBundle

impl StructuralPartialEq for JwtBundle