jwt_compact/
claims.rs

1use chrono::{DateTime, Duration, Utc};
2use serde::{Deserialize, Serialize};
3
4use crate::{Claim, ValidationError};
5
6/// Time-related options for token creation and validation.
7///
8/// If the `clock` crate feature is on (and it's on by default), `TimeOptions` can be created
9/// using the `Default` impl or [`Self::from_leeway()`]. If the feature is off,
10/// you can still create options using [a generic constructor](Self::new).
11///
12/// # Examples
13///
14/// ```
15/// # use chrono::{Duration, Utc};
16/// # use jwt_compact::TimeOptions;
17/// // Default options.
18/// let default_options = TimeOptions::default();
19/// let options_with_custom_leeway =
20///     TimeOptions::from_leeway(Duration::try_seconds(5).unwrap());
21/// // Options that have a fixed time. Can be useful for testing.
22/// let clock_time = Utc::now();
23/// let options_with_stopped_clock =
24///     TimeOptions::new(Duration::try_seconds(10).unwrap(), move || clock_time);
25/// ```
26#[derive(Debug, Clone, Copy)]
27#[non_exhaustive]
28pub struct TimeOptions<F = fn() -> DateTime<Utc>> {
29    /// Leeway to use during validation.
30    pub leeway: Duration,
31    /// Source of the current timestamps.
32    pub clock_fn: F,
33}
34
35impl<F: Fn() -> DateTime<Utc>> TimeOptions<F> {
36    /// Creates options based on the specified time leeway and clock function.
37    pub fn new(leeway: Duration, clock_fn: F) -> Self {
38        Self { leeway, clock_fn }
39    }
40}
41
42impl TimeOptions {
43    /// Creates options based on the specified time leeway. The clock source is [`Utc::now()`].
44    #[cfg(feature = "clock")]
45    #[cfg_attr(docsrs, doc(cfg(feature = "clock")))]
46    pub fn from_leeway(leeway: Duration) -> Self {
47        Self {
48            leeway,
49            clock_fn: Utc::now,
50        }
51    }
52}
53
54/// Creates options with a default leeway (60 seconds) and the [`Utc::now()`] clock.
55///
56/// This impl is supported on **crate feature `clock`** only.
57#[cfg(feature = "clock")]
58impl Default for TimeOptions {
59    fn default() -> Self {
60        Self::from_leeway(Duration::try_seconds(60).unwrap())
61    }
62}
63
64/// A structure with no fields that can be used as a type parameter to `Claims`.
65#[derive(Debug, Clone, Copy, Default, PartialEq, Eq, Hash, Serialize, Deserialize)]
66pub struct Empty {}
67
68/// Claims encoded in a token.
69///
70/// Claims are comprised of a "standard" part (`exp`, `nbf` and `iat` claims as per [JWT spec]),
71/// and custom fields. `iss`, `sub` and `aud` claims are not in the standard part
72/// due to a variety of data types they can be reasonably represented by.
73///
74/// [JWT spec]: https://tools.ietf.org/html/rfc7519#section-4.1
75#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
76#[non_exhaustive]
77pub struct Claims<T> {
78    /// Expiration time of the token.
79    #[serde(
80        rename = "exp",
81        default,
82        skip_serializing_if = "Option::is_none",
83        with = "self::serde_timestamp"
84    )]
85    pub expiration: Option<DateTime<Utc>>,
86
87    /// Minimum time at which token is valid.
88    #[serde(
89        rename = "nbf",
90        default,
91        skip_serializing_if = "Option::is_none",
92        with = "self::serde_timestamp"
93    )]
94    pub not_before: Option<DateTime<Utc>>,
95
96    /// Time of token issuance.
97    #[serde(
98        rename = "iat",
99        default,
100        skip_serializing_if = "Option::is_none",
101        with = "self::serde_timestamp"
102    )]
103    pub issued_at: Option<DateTime<Utc>>,
104
105    /// Custom claims.
106    #[serde(flatten)]
107    pub custom: T,
108}
109
110impl Claims<Empty> {
111    /// Creates an empty claims instance.
112    pub fn empty() -> Self {
113        Self {
114            expiration: None,
115            not_before: None,
116            issued_at: None,
117            custom: Empty {},
118        }
119    }
120}
121
122impl<T> Claims<T> {
123    /// Creates a new instance with the provided custom claims.
124    pub fn new(custom_claims: T) -> Self {
125        Self {
126            expiration: None,
127            not_before: None,
128            issued_at: None,
129            custom: custom_claims,
130        }
131    }
132
133    /// Sets the `expiration` claim so that the token has the specified `duration`.
134    /// The current timestamp is taken from `options`.
135    #[must_use]
136    pub fn set_duration<F>(self, options: &TimeOptions<F>, duration: Duration) -> Self
137    where
138        F: Fn() -> DateTime<Utc>,
139    {
140        Self {
141            expiration: Some((options.clock_fn)() + duration),
142            ..self
143        }
144    }
145
146    /// Atomically sets `issued_at` and `expiration` claims: first to the current time
147    /// (taken from `options`), and the second to match the specified `duration` of the token.
148    #[must_use]
149    pub fn set_duration_and_issuance<F>(self, options: &TimeOptions<F>, duration: Duration) -> Self
150    where
151        F: Fn() -> DateTime<Utc>,
152    {
153        let issued_at = (options.clock_fn)();
154        Self {
155            expiration: Some(issued_at + duration),
156            issued_at: Some(issued_at),
157            ..self
158        }
159    }
160
161    /// Sets the `nbf` claim.
162    #[must_use]
163    pub fn set_not_before(self, moment: DateTime<Utc>) -> Self {
164        Self {
165            not_before: Some(moment),
166            ..self
167        }
168    }
169
170    /// Validates the expiration claim.
171    ///
172    /// This method will return an error if the claims do not feature an expiration time,
173    /// or if it is in the past (subject to the provided `options`).
174    pub fn validate_expiration<F>(&self, options: &TimeOptions<F>) -> Result<&Self, ValidationError>
175    where
176        F: Fn() -> DateTime<Utc>,
177    {
178        self.expiration.map_or(
179            Err(ValidationError::NoClaim(Claim::Expiration)),
180            |expiration| {
181                let expiration_with_leeway = expiration
182                    .checked_add_signed(options.leeway)
183                    .unwrap_or(DateTime::<Utc>::MAX_UTC);
184                if (options.clock_fn)() > expiration_with_leeway {
185                    Err(ValidationError::Expired)
186                } else {
187                    Ok(self)
188                }
189            },
190        )
191    }
192
193    /// Validates the maturity time (`nbf` claim).
194    ///
195    /// This method will return an error if the claims do not feature a maturity time,
196    /// or if it is in the future (subject to the provided `options`).
197    pub fn validate_maturity<F>(&self, options: &TimeOptions<F>) -> Result<&Self, ValidationError>
198    where
199        F: Fn() -> DateTime<Utc>,
200    {
201        self.not_before.map_or(
202            Err(ValidationError::NoClaim(Claim::NotBefore)),
203            |not_before| {
204                if (options.clock_fn)() < not_before - options.leeway {
205                    Err(ValidationError::NotMature)
206                } else {
207                    Ok(self)
208                }
209            },
210        )
211    }
212}
213
214mod serde_timestamp {
215    use core::fmt;
216
217    use chrono::{DateTime, Utc, offset::TimeZone};
218    use serde::{
219        Deserializer, Serializer,
220        de::{Error as DeError, Visitor},
221    };
222
223    struct TimestampVisitor;
224
225    impl Visitor<'_> for TimestampVisitor {
226        type Value = DateTime<Utc>;
227
228        fn expecting(&self, formatter: &mut fmt::Formatter<'_>) -> fmt::Result {
229            formatter.write_str("UTC timestamp")
230        }
231
232        fn visit_i64<E>(self, value: i64) -> Result<Self::Value, E>
233        where
234            E: DeError,
235        {
236            Utc.timestamp_opt(value, 0)
237                .single()
238                .ok_or_else(|| E::custom("UTC timestamp overflow"))
239        }
240
241        fn visit_u64<E>(self, value: u64) -> Result<Self::Value, E>
242        where
243            E: DeError,
244        {
245            let value = i64::try_from(value).map_err(DeError::custom)?;
246            Utc.timestamp_opt(value, 0)
247                .single()
248                .ok_or_else(|| E::custom("UTC timestamp overflow"))
249        }
250
251        #[allow(clippy::cast_possible_truncation)]
252        // ^ If truncation occurs, the `timestamp_opt()` won't return a single value anyway
253        fn visit_f64<E>(self, value: f64) -> Result<Self::Value, E>
254        where
255            E: DeError,
256        {
257            Utc.timestamp_opt(value as i64, 0)
258                .single()
259                .ok_or_else(|| E::custom("UTC timestamp overflow"))
260        }
261    }
262
263    #[allow(unknown_lints, clippy::ref_option)] // function signature required by `serde`
264    pub fn serialize<S: Serializer>(
265        time: &Option<DateTime<Utc>>,
266        serializer: S,
267    ) -> Result<S::Ok, S::Error> {
268        // `unwrap` is safe due to `skip_serializing_if` option
269        serializer.serialize_i64(time.unwrap().timestamp())
270    }
271
272    pub fn deserialize<'de, D: Deserializer<'de>>(
273        deserializer: D,
274    ) -> Result<Option<DateTime<Utc>>, D::Error> {
275        deserializer.deserialize_i64(TimestampVisitor).map(Some)
276    }
277}
278
279#[cfg(all(test, feature = "clock"))]
280mod tests {
281    use alloc::{string::ToString, vec::Vec};
282
283    use assert_matches::assert_matches;
284    use chrono::TimeZone;
285
286    use super::*;
287
288    #[test]
289    fn empty_claims_can_be_serialized() {
290        let mut claims = Claims::empty();
291        assert!(serde_json::to_string(&claims).is_ok());
292        claims.expiration = Some(Utc::now());
293        assert!(serde_json::to_string(&claims).is_ok());
294        claims.not_before = Some(Utc::now());
295        assert!(serde_json::to_string(&claims).is_ok());
296    }
297
298    #[test]
299    #[cfg(feature = "ciborium")]
300    fn empty_claims_can_be_serialized_to_cbor() {
301        let mut claims = Claims::empty();
302        assert!(ciborium::into_writer(&claims, &mut Vec::new()).is_ok());
303        claims.expiration = Some(Utc::now());
304        assert!(ciborium::into_writer(&claims, &mut Vec::new()).is_ok());
305        claims.not_before = Some(Utc::now());
306        assert!(ciborium::into_writer(&claims, &mut Vec::new()).is_ok());
307    }
308
309    #[test]
310    fn expired_claim() {
311        let mut claims = Claims::empty();
312        let time_options = TimeOptions::default();
313        assert_matches!(
314            claims.validate_expiration(&time_options).unwrap_err(),
315            ValidationError::NoClaim(Claim::Expiration)
316        );
317
318        claims.expiration = Some(DateTime::<Utc>::MAX_UTC);
319        assert!(claims.validate_expiration(&time_options).is_ok());
320
321        claims.expiration = Some(Utc::now() - Duration::try_hours(1).unwrap());
322        assert_matches!(
323            claims.validate_expiration(&time_options).unwrap_err(),
324            ValidationError::Expired
325        );
326
327        claims.expiration = Some(Utc::now() - Duration::try_seconds(10).unwrap());
328        // With the default leeway, this claim is still valid.
329        assert!(claims.validate_expiration(&time_options).is_ok());
330        // If we set leeway lower, then the claim will be considered expired.
331        assert_matches!(
332            claims
333                .validate_expiration(&TimeOptions::from_leeway(Duration::try_seconds(5).unwrap()))
334                .unwrap_err(),
335            ValidationError::Expired
336        );
337        // Same if we set the current time in the past.
338        let expiration = claims.expiration.unwrap();
339        assert!(
340            claims
341                .validate_expiration(&TimeOptions::new(
342                    Duration::try_seconds(3).unwrap(),
343                    move || { expiration }
344                ))
345                .is_ok()
346        );
347    }
348
349    #[test]
350    fn immature_claim() {
351        let mut claims = Claims::empty();
352        let time_options = TimeOptions::default();
353        assert_matches!(
354            claims.validate_maturity(&time_options).unwrap_err(),
355            ValidationError::NoClaim(Claim::NotBefore)
356        );
357
358        claims.not_before = Some(Utc::now() + Duration::try_hours(1).unwrap());
359        assert_matches!(
360            claims.validate_maturity(&time_options).unwrap_err(),
361            ValidationError::NotMature
362        );
363
364        claims.not_before = Some(Utc::now() + Duration::try_seconds(10).unwrap());
365        // With the default leeway, this claim is still valid.
366        assert!(claims.validate_maturity(&time_options).is_ok());
367        // If we set leeway lower, then the claim will be considered expired.
368        assert_matches!(
369            claims
370                .validate_maturity(&TimeOptions::from_leeway(Duration::try_seconds(5).unwrap()))
371                .unwrap_err(),
372            ValidationError::NotMature
373        );
374    }
375    #[test]
376    fn float_timestamp() {
377        let claims = "{\"exp\": 1.691203462e+9}";
378        let claims: Claims<Empty> = serde_json::from_str(claims).unwrap();
379        let timestamp = Utc.timestamp_opt(1_691_203_462, 0).single().unwrap();
380        assert_eq!(claims.expiration, Some(timestamp));
381    }
382
383    #[test]
384    fn float_timestamp_errors() {
385        let invalid_claims = ["{\"exp\": 1e20}", "{\"exp\": -1e20}"];
386        for claims in invalid_claims {
387            let err = serde_json::from_str::<Claims<Empty>>(claims).unwrap_err();
388            let err = err.to_string();
389            assert!(err.contains("UTC timestamp overflow"), "{err}");
390        }
391    }
392}
jwt_compact/claims.rs

jwt_compact/
claims.rs
