okta-jwt-verifier

A helper library for working with JWT's for Okta in Rust

Install

Cargo.toml

toml [dependencies] okta-jwt-verifier = "0.3.0"

With cargo add installed :

sh cargo add okta-jwt-verifier

Example - Basic Usage

This example attempts to retrieve the keys from the provided Okta authorization server, decodes the token header to identify the key id, attempts to find a matching key, attempts to decode the token, and finally attempts to deserialize the claims.

This method will attempt to retrieve the keys upon each request.

```rust use oktajwtverifier::verify; use serde::{Deserialize, Serialize};

// You can provide your own Claims struct or use the provided defaults // This example matches oktajwtverifier::DefaultClaims

[derive(Serialize, Deserialize)]

pub struct Claims { pub iss: String, pub sub: String, pub scp: Vec, pub cid: String, pub uid: String, pub exp: u64, pub iat: u64, }

let token = "token"; let issuer = "https://your.domain/oauth2/default";

verify::(&issuer, &token).await?; ```

Example - Caching

This example matches the basic example but would cache the keys on disk. Requires the disk-cache feature to be enabled (disabled by default). Creates a surf-cacache directory relative to the working directory where the cache files will reside.

Cargo.toml

toml [dependencies] okta-jwt-verifier = { version = "0.3.0", features = ["disk-cache"] }

Example - Tide Middleware

• Tide Middleware (Basic):

  This example implements the basic usage example as tide middleware.

  sh ISSUER="https://your.domain/oauth2/default" cargo run --example tide_middleware_basic

Features

The following features are available. By default no features are enabled.

• disk-cache: use a cache on disk to store keys (respects cache-control).

Documentation

• API Docs

Development

Testing

• Note that this requires an internet connection

First copy the example config to a new file:

sh cp .env_example .env

Update the ISSUER variable to reflect your environment (authorization host). Also set TEST_TOKEN to a JWT to test against, then run the tests:

sh cargo test

Or test with the optional disk cache:

sh cargo test --features disk-cache