JWKS-Client is a library written in Rust to decode and validate JWT tokens using a JSON Web Key Store. It supports caching of JWKS in Redis.

Available on crates.io.

JWKS key store

• Download key set from HTTP address
• Decode JWT tokens into header, payload and signature
• Verify token signature, expiry and not-before
• Cache key set in Redis based on max-age certificate header

JWT:

• Transfer header and payload in user-defined struct.
• Accessor for standard header and payload fields

JWKS-Client was create specifically to decode GCP JWT.

Changelog:

v0.2.2: derive Clone for KeyStore