Use pasetors crate for PASETO
ADR-0024
Use pasetors crate for PASETO implementation
Context
Decision
Use the pasetors crate for PASETO token implementation with PASERK key management capabilities.
Rationale
- PASERK support: Built-in PASERK (PASETO Keys) implementation for secure key identifiers
- Complete implementation: Full PASETO v4.local support with proper footer handling
- Active maintenance: Regular updates and security patches
- Type safety: Strong typing for keys, tokens, and claims
- Ecosystem completeness: Provides all necessary components for secure token rotation
Alternatives Considered
- rusty-paseto: Limited PASERK support, less active development
- pasta-tokens: Incomplete v4 implementation, missing key management features
Consequences
- Positive: Comprehensive PASETO ecosystem with built-in key management, enabling secure token rotation patterns
- Positive: Strong type safety reduces implementation errors
- Negative: Additional dependency with specific feature requirements