Struct JwtBearerTokenProvider 

pub struct JwtBearerTokenProvider { /* private fields */ }

An OAUTHBEARER token provider that uses the OAuth 2 jwt-bearer grant with a signed client assertion (RFC 7523), as Kafka’s JwtBearerJwtRetriever with JwtBearerRequestFormatter does.

It keeps the token until the refresh time of Kafka’s ExpiringCredentialRefreshingLogin, then fetches a new one.

Implementations

impl JwtBearerTokenProvider

pub fn new(config: JwtBearerConfig) -> Result<Arc<Self>, String>

A provider for config.

Errors

Returns a description when the algorithm is not RS256, the endpoint is not an http or https URL, the private key file or template file cannot be read or parsed, or a refresh window setting is out of range, as Kafka’s ConfigException.

Trait Implementations

impl Debug for JwtBearerTokenProvider

fn fmt(&self, formatter: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl OAuthBearerTokenProvider for JwtBearerTokenProvider

fn token(&self) -> TokenFuture<'_>

The compact serialized token to send.

fn refresh(&self) -> TokenFuture<'_>

Fetch a new token even when a cached one has not reached its refresh time, as Kafka’s ExpiringCredentialRefreshingLogin re-logs in once its refresh timer fires. spawn_background_refresh calls this at each Self::refresh_at; a provider that caches nothing can leave the default, which is Self::token.

fn refresh_at(&self) -> RefreshFuture<'_>

The time a cached token should next be refreshed, once Self::token has fetched one. spawn_background_refresh polls this to know when to wake up and fetch proactively; a provider that caches nothing can leave the default, which never schedules a background fetch.

fn background_refresh_enabled(&self) -> bool

Whether spawn_background_refresh should run a background task for this provider.