Struct Eab 

pub struct Eab {
    pub kid: String,
    pub secret: Vec<u8>,
    pub label: Option<String>,
    pub profile: Option<String>,
    pub status: String,
    pub created_at: i64,
}

An External Account Binding credential (RFC 8555 §7.3.4): a pre-shared kid + HMAC secret an operator issues out-of-band, presented by a client at newAccount to prove it was authorized to register.

Reusable: the same key can bind more than one account, until revoked (see the migration). There is therefore no “used” status, only active/revoked.

Methods

• create: generate a fresh key and persist it, active
• find_by_kid: lookup by kid (the request-time verification path)
• list_all: list every key, oldest first (admin CLI, /ui/eab)
• search: one page of the same listing plus the unpaged total (/api/eab)
• revoke: move to the terminal revoked state
• to_json: admin-facing rendering (never includes the secret)

Fields

kid: String

secret: Vec<u8>

label: Option<String>

profile: Option<String>

Which ACME endpoint the credential is good for. None means every profile – the default, for an operator who does not care to scope it.

status: String

created_at: i64

Implementations

impl Eab

pub async fn create( label: Option<String>, profile: Option<String>, database: &Database, ) -> Result<Eab, Error>

Generates a fresh key (random UUID kid + random 32-byte secret) and persists it active. Returns the created row so the caller (the eab create admin command) can print the secret once – this is the only time it is meant to leave the database in plaintext form.

pub async fn find_by_kid( kid: &str, profile: &str, database: &Database, ) -> Result<Option<Eab>, Error>

Looks a credential up for use at profile. A row scoped to another profile is not returned: to the endpoint asking, it does not exist. A row with no profile at all matches everywhere.

pub async fn find_any_by_kid( kid: &str, database: &Database, ) -> Result<Option<Eab>, Error>

Looks a credential up by kid regardless of the profile it is scoped to – the admin CLI’s eab show/eab revoke, where the operator holds the kid and wants to see it whatever it is bound to. Never the request path, which must use Eab::find_by_kid.

pub async fn list_all(database: &Database) -> Result<Vec<Eab>, Error>

Lists every key, oldest first – eab list and /ui/eab.

Tie-broken on kid so it reads the table in the same order Eab::search pages it in. created_at is a whole second, and an operator minting a handful of credentials in one go lands them all in one – so without the tie-break these two orderings were free to disagree, and the unpaged one was not even stable between calls.

pub async fn search( limit: i64, offset: i64, database: &Database, ) -> Result<(Vec<Eab>, i64), Error>

One page of the same listing, plus the total the table holds unpaged.

GET /api/eab’s window. Ordering stays oldest first, unlike Account::search and Order::search: this is a table an operator mints by hand a few rows at a time, so a fresh head buys nothing, and flipping it would make the API disagree with /ui/eab and eab list, both of which still read Eab::list_all. kid breaks the created_at tie for Account::search’s reason — whole-second timestamps would otherwise let two rows swap between pages, and one of them would never be seen.

pub async fn revoke(kid: &str, database: &Database) -> Result<bool, Error>

Moves the key to the terminal-for-new-use revoked state. Existing accounts bound under it are unaffected (see the migration’s note on accounts.eab_kid). Idempotent: revoking an already-revoked key still matches the row and reports true. Returns whether a row existed.

pub fn is_active(&self) -> bool

Whether this key may still be used to bind a new account.

pub fn to_json(&self) -> Value

The admin-facing rendering: kid, label, profile, status, createdAt. Never includes the secret – that is shown once, by eab create, via admin::render_eab_created_json/render_eab_created_text, never again from show/list.

Trait Implementations

impl Debug for Eab

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.