2 releases
0.1.3 | Feb 12, 2024 |
---|---|
0.1.2 | Jan 26, 2024 |
#1272 in Encoding
210 downloads per month
17KB
287 lines
jwks
Fetch and parse JSON Web Key Set (JWKS)
cargo add jwks
Usage
From a jwks url.
let jwks_url = "https://www.googleapis.com/oauth2/v3/certs";
let jwks = Jwks::from_jwks_url(jwks_url).await.unwrap();
From a openid config url.
let openid_config_url = "https://accounts.google.com/.well-known/openid-configuration";
let jwks = Jwks::from_oidc_url(openid_config_url).await.unwrap();
Use with jsonwebtokn to validate a jwt
use jsonwebtoken::{decode, decode_header, Algorithm, TokenData, Validation};
let jwt = "...base64-encoded-jwt...";
// get the kid from jwt
let header = decode_header(jwt).expect("jwt header should be decoded");
let kid = header.kid.as_ref().expect("jwt header should have a kid");
// get a jwk from jwks by kid
let jwks_url = "https://www.googleapis.com/oauth2/v3/certs";
let jwks = Jwks::from_jwks_url().await.unwrap();
let jwk = jwks.keys.get(kid).expect("jwt refer to a unknown key id");
let validation = Validation::default();
let decoded_token: TokenData<Claims> = decode::<Claims>(jwt, &jwk.decoding_key, &validation).expect("jwt should be valid");
Dependencies
~6–19MB
~288K SLoC