Struct JwtSvid

pub struct JwtSvid { /* private fields */ }

This type represents a SPIFFE JWT-SVID.

The token field is zeroized on drop.

Implementations

impl JwtSvid

pub fn parse_and_validate<T: AsRef<str> + ToString + Debug>( token: &str, bundle_source: &impl BundleRefSource<Item = JwtBundle>, expected_audience: &[T], ) -> Result<Self, JwtSvidError>

Parses the given token verifying the token signature using the provided [BundleSource] as a source of JwtBundle, validating the audience in the token with the expected audience, and validating the expiration datetime.

Returns a validated instance of JwtSvid.

Arguments

• token: JWT token to parse.
• bundle_source: Struct that implements a [BundleSource] for the type JwtBundle.
• expected_audience: List of audience strings that should be present in the token ‘aud’ claim.

Errors

If the function cannot parse or verify the signature of the token, a JwtSvidError variant will be returned.

pub fn parse_insecure(token: &str) -> Result<Self, JwtSvidError>

Creates a new JwtSvid with the given token without signature verification.

IMPORTANT: For parsing and validating the signature of untrusted tokens, use parse_and_validate method.

pub fn token(&self) -> &str

Returns the serialized JWT token.

pub fn spiffe_id(&self) -> &SpiffeId

Returns the SPIFFE ID (‘aud’ claim) of the token.

pub fn audience(&self) -> &Vec<String>

Returns the audience as present in the ‘aud’ claim.

pub fn expiry(&self) -> &Date

Returns the expiration date of the JWT token.

pub fn key_id(&self) -> &str

Returns the key id header of the JWT token.

Trait Implementations

impl Clone for JwtSvid

fn clone(&self) -> JwtSvid

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for JwtSvid

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl FromStr for JwtSvid

fn from_str(token: &str) -> Result<Self, Self::Err>

Creates a new JwtSvid with the given token without signature verification. Any result from this function is untrusted.

IMPORTANT: For parsing and validating the signature of untrusted tokens, use parse_and_validate method.

type Err = JwtSvidError

The associated error which can be returned from parsing.

impl PartialEq for JwtSvid

fn eq(&self, other: &JwtSvid) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for JwtSvid

impl Svid for JwtSvid