Skip to content

HMAC-only JWT provider to shrink binaries #1171

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
pblazej merged 3 commits into from
Jun 17, 2026
Merged

HMAC-only JWT provider to shrink binaries #1171

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
eba45f3
perf(livekit-api): HMAC-only JWT provider to shrink binary size
pblazej Jun 16, 2026
8f0582e
ci(uniffi): drop obsolete nightly/build-std for tvOS/visionOS
pblazej Jun 16, 2026
6d0fccf
style(livekit-api): add license header and rustfmt jwt_provider.rs
pblazej Jun 16, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
13 changes: 13 additions & 0 deletions .changeset/hmac-only-jwt-shrink-binaries.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,13 @@
---
livekit-api: patch
---

# Shrink binaries with an HMAC-only JWT crypto provider

`livekit-api` now installs a minimal in-crate HMAC `CryptoProvider`
(HS256/384/512) instead of jsonwebtoken's `rust_crypto` backend, dropping the
unused RSA/EC/EdDSA algorithms. LiveKit access tokens are HS256, so there is no
public API or behavior change. This trims ~200 KiB of unreachable crypto code,
shrinking the shipped binaries ~25–29% — the `RustLiveKitUniFFI` iOS framework
drops from ~900 KiB to ~672 KiB (arm64) and the Android arm64-v8a `.so` from
~1.13 MiB to ~816 KiB. `livekit-ffi` and `livekit` benefit too.
15 changes: 6 additions & 9 deletions .github/workflows/uniffi-swift.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -56,7 +56,7 @@ jobs:

- uses: Swatinem/rust-cache@e18b497796c12c097a38f9edb9d0641fb99eee32 # v2

- name: Install Apple Rust targets (tier 1/2)
- name: Install Apple Rust targets
run: |
rustup target add \
aarch64-apple-ios \
Expand All @@ -65,14 +65,11 @@ jobs:
aarch64-apple-ios-macabi \
x86_64-apple-ios-macabi \
aarch64-apple-darwin \
x86_64-apple-darwin

# tvOS + visionOS are still tier 3 (no prebuilt std), so cargo-swift
# builds them via `cargo +nightly -Zbuild-std`. Toolchain + rust-src
# need to exist ahead of time.
- name: Install nightly + rust-src (tvOS/visionOS tier-3 targets)
run: |
rustup toolchain install nightly --profile minimal --component rust-src
x86_64-apple-darwin \
aarch64-apple-tvos \
aarch64-apple-tvos-sim \
aarch64-apple-visionos \
aarch64-apple-visionos-sim

- uses: cargo-bins/cargo-binstall@aaa84a43aec4955a42c5ffc65d258961e39f276e # v1.19.1
- run: cargo binstall cargo-make --no-confirm
Expand Down
Loading
Loading