Struct JwksHandle 

pub struct JwksHandle { /* private fields */ }

A cheaply-clonable, atomically-swappable holder for the live Jwks.

Mirrors DynamicServerConfig: the broker’s background JWKS refresher stores a freshly-fetched key set while validators load the current one with no lock. A clone of a handle shares the same underlying cell.

A handle paired with a refresher also carries a shared last_successful_fetch_ms counter for the hard cache-expiry checks in the signed validator. It carries a signal_tx mpsc sender as well, for fire-and-forget on-demand refresh requests when a validator meets an unknown-kid or bad-signature token. A default-constructed handle carries no signal sender, and signal_refresh() is a silent no-op on those.

Implementations

impl JwksHandle

pub fn new(jwks: Jwks) -> Self

Wrap an initial key set with NO refresher coordination.

The initial key set is often Jwks::empty at startup. Default-constructed handles use this constructor, as do tests that do not need the signal channel. signal_refresh() on these is a silent no-op.

pub fn new_with_refresher_handles( jwks: Jwks, last_successful_fetch_ms: Arc<AtomicI64>, signal_tx: Sender<()>, ) -> Self

Wrap an initial key set WITH the shared timestamp counter and signal sender pre-wired.

The refresher constructs its own (signal_tx, signal_rx) pair and passes signal_tx here. The refresher keeps signal_rx and a clone of the shared Arc<AtomicI64> for the timestamp updates.

pub fn store(&self, jwks: Jwks)

Atomically replace the key set.

The refresher calls this after a successful fetch. The swap is lock-free. A concurrent load sees either the old set or the new set, never a torn one.

pub fn load(&self) -> Arc<Jwks>

Load the current key set. This costs one Arc clone.

pub fn last_successful_fetch_ms(&self) -> i64

Epoch-ms timestamp of the last successful JWKS fetch.

The value is 0 if no fetch has succeeded yet, the initial state. Validators compare it against now_ms - expiry_ms to enforce hard cache expiry.

pub fn signal_refresh(&self)

Fire-and-forget signal to the refresher that asks for an on-demand refresh, for example after an unknown-kid token.

This call does not block. It drops the signal silently if the channel is full, because signals coalesce and one is enough. It is a no-op when signal_tx is None, which is the case for default-constructed handles.

Trait Implementations

impl Clone for JwksHandle

fn clone(&self) -> JwksHandle

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for JwksHandle

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for JwksHandle

fn default() -> Self

Returns the “default value” for a type.