Struct DMSCJWTManager 

pub struct DMSCJWTManager { /* private fields */ }

Core JWT management structure.

The DMSCJWTManager handles all JWT-related operations including token generation, validation, and secret key management. It uses the HS256 (HMAC SHA-256) algorithm for signing tokens.

Thread Safety

This structure is designed to be shared across threads when wrapped in an Arc. All methods are stateless regarding the token content and only read the configuration (secret and expiry).

Algorithm

Uses HMAC-SHA256 (HS256) for token signing. This symmetric algorithm uses the same secret key for both signing and verification.

Performance

Token generation and validation are designed to be fast operations. The encoding/decoding operations are primarily CPU-bound due to the HMAC computation.

Implementations

impl DMSCJWTManager

pub fn new(secret: String, expiry_secs: u64) -> Self

Creates a new JWT manager with the specified secret and expiry time.

This constructor is used for Python bindings and creates a JWT manager that can generate and validate tokens with the given configuration.

Parameters

• secret: The secret key used for signing and verifying JWT tokens
• expiry_secs: The default expiry time in seconds for generated tokens

Returns

A new instance of DMSCJWTManager

pub fn py_generate_token( &self, user_id: &str, roles: Vec<String>, permissions: Vec<String>, ) -> Result<String, DMSCError>

Generates a new JWT token for the specified user with roles and permissions.

Parameters

• user_id: The unique identifier of the user (subject claim)
• roles: A list of role identifiers assigned to the user
• permissions: A list of permission identifiers granted to the user

Returns

The encoded JWT token string

pub fn py_validate_token(&self, token: &str) -> Result<DMSCJWTClaims, DMSCError>

Validates a JWT token and returns the decoded claims.

Parameters

• token: The JWT token string to validate

Returns

The decoded DMSCJWTClaims if validation succeeds

pub fn py_get_token_expiry(&self) -> u64

Returns the default token expiry time in seconds.

impl DMSCJWTManager

pub fn create(secret: String, expiry_secs: u64) -> Self

Creates a new JWT manager with the specified secret and expiry time.

This is the primary constructor for creating a JWT manager. It initializes the manager with a secret key and default token expiry time. The secret key is used for both signing new tokens and validating existing ones.

Performance

This constructor pre-computes the encoding and decoding keys for optimal performance during token generation and validation operations.

Parameters

• secret: The secret key used for signing and verifying JWT tokens
• expiry_secs: The default expiry time in seconds for generated tokens

Returns

A new instance of DMSCJWTManager

Examples

use dmsc::auth::jwt::DMSCJWTManager;

let manager = DMSCJWTManager::create(
    "your-secret-key".to_string(),
    3600  // 1 hour expiry
);

pub fn generate_token( &self, user_id: &str, roles: Vec<String>, permissions: Vec<String>, ) -> Result<String, DMSCError>

Generates a new JWT token for the specified user with roles and permissions.

This method creates a signed JWT token containing the user’s subject identifier, assigned roles, and permissions. The token is signed using HMAC-SHA256 algorithm.

Token Claims

The generated token includes the following claims:

• sub: The user identifier
• exp: Expiration time (current time + expiry_secs)
• iat: Issued at time (current time)
• roles: List of role identifiers
• permissions: List of permission identifiers

Parameters

• user_id: The unique identifier of the user (subject claim)
• roles: A vector of role identifiers assigned to the user
• permissions: A vector of permission identifiers granted to the user

Returns

A Result containing the encoded JWT token string, or a DMSCError if encoding fails

Examples

use dmsc::auth::jwt::DMSCJWTManager;

let manager = DMSCJWTManager::create("secret".to_string(), 3600);

let token = manager.generate_token(
    "user123",
    vec!["admin".to_string()],
    vec!["read:data".to_string(), "write:data".to_string()]
);

match token {
    Ok(t) => println!("Generated token: {}", t),
    Err(e) => println!("Failed to generate token: {:?}", e),
}

pub fn validate_token(&self, token: &str) -> Result<DMSCJWTClaims, DMSCError>

Validates a JWT token and returns the decoded claims.

This method verifies the token’s signature and decodes the claims payload. It validates the token structure and signature using the configured secret key.

Validation Performed

• Verifies the token signature using HMAC-SHA256
• Validates the token structure (header, payload, signature)
• Checks token expiration if validation is enabled

Parameters

• token: The JWT token string to validate

Returns

A Result containing the decoded DMSCJWTClaims if validation succeeds, or a DMSCError if validation fails (invalid signature, expired token, etc.)

Examples

use dmsc::auth::jwt::DMSCJWTManager;

let manager = DMSCJWTManager::create("secret".to_string(), 3600);

// First generate a token
let token = manager.generate_token("user123", vec![], vec![]).unwrap();

// Then validate it
let claims = manager.validate_token(&token);

match claims {
    Ok(c) => println!("User: {}, Roles: {:?}", c.sub, c.roles),
    Err(e) => println!("Invalid token: {:?}", e),
}

pub fn get_token_expiry(&self) -> u64

Returns the default token expiry time in seconds.

This method returns the configured default expiry time that is used when generating new tokens.

Returns

The default token expiry time in seconds

pub fn get_secret(&self) -> &str

Returns a reference to the secret key.

This method provides read-only access to the configured secret key. The secret key is used for both signing and verifying tokens.

Returns

A string slice reference to the secret key

Security Note

Be cautious when exposing the secret key. In production, the secret should be stored securely and never logged or exposed to unauthorized parties.

Trait Implementations

impl<'py> IntoPyObject<'py> for DMSCJWTManager

type Target = DMSCJWTManager

The Python output type

type Output = Bound<'py, <DMSCJWTManager as IntoPyObject<'py>>::Target>

The smart pointer type to use.

type Error = PyErr

The type returned in the event of a conversion error.

fn into_pyobject( self, py: Python<'py>, ) -> Result<<Self as IntoPyObject<'_>>::Output, <Self as IntoPyObject<'_>>::Error>

Performs the conversion.

impl PyClass for DMSCJWTManager

type Frozen = False

Whether the pyclass is frozen.

impl PyClassImpl for DMSCJWTManager

const IS_BASETYPE: bool = false

#[pyclass(subclass)]

const IS_SUBCLASS: bool = false

#[pyclass(extends=…)]

const IS_MAPPING: bool = false

#[pyclass(mapping)]

const IS_SEQUENCE: bool = false

#[pyclass(sequence)]

const IS_IMMUTABLE_TYPE: bool = false

#[pyclass(immutable_type)]

const RAW_DOC: &'static CStr = c"Core JWT management structure.\n\nThe `DMSCJWTManager` handles all JWT-related operations including token\ngeneration, validation, and secret key management. It uses the HS256\n(HMAC SHA-256) algorithm for signing tokens.\n\n## Thread Safety\n\nThis structure is designed to be shared across threads when wrapped in\nan Arc. All methods are stateless regarding the token content and only\nread the configuration (secret and expiry).\n\n## Algorithm\n\nUses HMAC-SHA256 (HS256) for token signing. This symmetric algorithm\nuses the same secret key for both signing and verification.\n\n## Performance\n\nToken generation and validation are designed to be fast operations.\nThe encoding/decoding operations are primarily CPU-bound due to the\nHMAC computation.\x00"

Docstring for the class provided on the struct or enum.

const DOC: &'static CStr

Fully rendered class doc, including the text_signature if a constructor is defined.

type BaseType = PyAny

Base class

type ThreadChecker = SendablePyClass<DMSCJWTManager>

This handles following two situations:

type PyClassMutability = <<PyAny as PyClassBaseType>::PyClassMutability as PyClassMutability>::MutableChild

Immutable or mutable

type Dict = PyClassDummySlot

Specify this class has #[pyclass(dict)] or not.

type WeakRef = PyClassDummySlot

Specify this class has #[pyclass(weakref)] or not.

type BaseNativeType = PyAny

The closest native ancestor. This is PyAny by default, and when you declare #[pyclass(extends=PyDict)], it’s PyDict.

fn items_iter() -> PyClassItemsIter

fn lazy_type_object() -> &'static LazyTypeObject<Self>

fn dict_offset() -> Option<isize>

fn weaklist_offset() -> Option<isize>

impl PyClassNewTextSignature for DMSCJWTManager

const TEXT_SIGNATURE: &'static str = "(secret, expiry_secs)"

impl PyMethods<DMSCJWTManager> for PyClassImplCollector<DMSCJWTManager>

fn py_methods(self) -> &'static PyClassItems

impl PyTypeInfo for DMSCJWTManager

const NAME: &'static str = "DMSCJWTManager"

Class name.

const MODULE: Option<&'static str> = ::core::option::Option::None

Module name, if any.

fn type_object_raw(py: Python<'_>) -> *mut PyTypeObject

Returns the PyTypeObject instance for this type.

fn type_object(py: Python<'_>) -> Bound<'_, PyType>

Returns the safe abstraction over the type object.

fn is_type_of(object: &Bound<'_, PyAny>) -> bool

Checks if object is an instance of this type or a subclass of this type.

fn is_exact_type_of(object: &Bound<'_, PyAny>) -> bool

Checks if object is an instance of this type.

impl DerefToPyAny for DMSCJWTManager

impl ExtractPyClassWithClone for DMSCJWTManager