Struct HmacConfig

pub struct HmacConfig {
    pub secret: SecretBox<[u8]>,
    pub max_age_seconds: i64,
    pub bind_htu_htm: bool,
    pub bind_jkt: bool,
    pub bind_client: bool,
}

Configuration for HMAC-based nonce mode.

Stateless HMAC-based nonces: encode ts+rand+ctx and MAC it.

Fields

secret: SecretBox<[u8]>

max_age_seconds: i64

bind_htu_htm: bool

bind_jkt: bool

bind_client: bool

Implementations

impl HmacConfig

pub fn new<S>( secret: S, max_age_seconds: i64, bind_htu_htm: bool, bind_jkt: bool, bind_client: bool, ) -> Self

where S: IntoSecretBox,

Create a new HMAC configuration with a secret that can be converted to SecretBox<[u8]>.

Accepts either a SecretBox<[u8]> or any type that can be converted to bytes (e.g., &[u8], Vec<u8>). Non-boxed types will be automatically converted to SecretBox internally.

Example

use dpop_verifier::{HmacConfig, NonceMode};
 
// With a byte array (b"..." syntax)
let config = HmacConfig::new(b"my-secret-key", 300, true, true, true);
let mode = NonceMode::Hmac(config);
 
// With a byte slice
let secret_slice: &[u8] = b"my-secret-key";
let config = HmacConfig::new(secret_slice, 300, true, true, true);
 
// With a Vec<u8>
let secret = b"my-secret-key".to_vec();
let config = HmacConfig::new(&secret, 300, true, true, true);
 
// With a SecretBox (already boxed)
use secrecy::SecretBox;
let secret_box = SecretBox::from(b"my-secret-key".to_vec());
let config = HmacConfig::new(&secret_box, 300, true, true, true);

Trait Implementations

impl Clone for HmacConfig

fn clone(&self) -> HmacConfig

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for HmacConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.