Struct ManagedSecrets 

pub struct ManagedSecrets { /* private fields */ }

Versioned persistence keys. New ciphertext uses the current version; retained versions read existing ciphertext without rewriting it. Removing a retained version retires it immediately. Signed cookies use only the current key and are invalidated when that key changes.

Implementations

impl ManagedSecrets

pub fn new(version: u64, secret: impl Into<String>) -> Self

pub fn retain(self, version: u64, secret: impl Into<String>) -> Self

Retain a previous version for reads. Replacing the current version’s key changes its key material; it does not change the selected version.

pub fn retire(self, version: u64) -> Self

Retire a reader. The current version cannot be retired; rotate by constructing a new configuration with a new current version instead.

pub const fn current_version(&self) -> u64

pub fn current_secret(&self) -> &str

pub fn key(&self, version: u64) -> Option<&str>

pub fn verification_secrets(&self) -> impl Iterator<Item = &str>

pub fn validate(&self) -> Result<(), AuthError>

Errors

Rejects invalid versions, empty readers and an insecure current key.

Trait Implementations

impl Clone for ManagedSecrets

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ManagedSecrets

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.