Struct TokenIssuer 

pub struct TokenIssuer { /* private fields */ }

Mints and verifies capability tokens. The supervisor holds one instance; the secret is generated once per process and never written to disk.

Implementations

impl TokenIssuer

pub fn new(secret: Vec<u8>) -> Self

pub fn new_random() -> Self

New issuer with a fresh 32-byte random secret (secrets.token_bytes(32)).

pub fn mint( &self, plugin_id: &str, granted_caps: &BTreeSet<String>, ttl_seconds: i64, ) -> CapabilityToken

Mint a token using the current wall clock and a fresh random session id.

pub fn mint_at( &self, plugin_id: &str, granted_caps: &BTreeSet<String>, ttl_seconds: i64, now: i64, session_id: &str, ) -> CapabilityToken

Deterministic mint core (explicit clock + session) for tests and replay.

pub fn verify( &self, token: &CapabilityToken, now: i64, ) -> Result<(), TokenError>

Verify the HMAC and expiry. now is unix seconds.