Struct HashTokenProvider 

pub struct HashTokenProvider { /* private fields */ }

HashToken-based token provider for internal runtime trust.

Implementations

impl HashTokenProvider

pub fn from_secret(secret: Vec<u8>) -> SecurityResult<Self>

Creates a provider from at least 16 bytes of secret material.

pub fn with_material( secret: Vec<u8>, salts: Vec<Vec<u8>>, algorithm: Algorithm, ) -> Self

Creates a provider with explicit salts and HashToken algorithm.

pub fn with_secret(secret: Vec<u8>, salts: Vec<Vec<u8>>) -> Self

Creates a SHA-256 provider with explicit secret and salts.

pub fn from_keyring( keyring: FileSecretKeyring, salts: Vec<Vec<u8>>, ) -> SecurityResult<Self>

Creates a rotation-aware provider backed by a durable file keyring.

Trait Implementations

impl Clone for HashTokenProvider

fn clone(&self) -> HashTokenProvider

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for HashTokenProvider

fn fmt(&self, formatter: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Drop for HashTokenProvider

fn drop(&mut self)

Executes the destructor for this type.

fn pin_drop(self: Pin<&mut Self>)

🔬This is a nightly-only experimental API. (pin_ergonomics)

Execute the destructor for this type, but different to Drop::drop, it requires self to be pinned.

impl TokenProvider for HashTokenProvider

fn seal(&self, payload: &[u8], claims: &TokenClaims) -> SecurityResult<Vec<u8>>

Authenticates and encrypts payload bytes.

fn open(&self, token: &[u8], claims: &TokenClaims) -> SecurityResult<Vec<u8>>

Authenticates and decrypts token bytes.

fn sign(&self, payload: &[u8], claims: &TokenClaims) -> SecurityResult<Vec<u8>>

Produces an authenticated signature carrying payload bytes.

fn verify( &self, payload: &[u8], signature: &[u8], claims: &TokenClaims, ) -> SecurityResult<()>

Verifies that a signature carries the expected payload and claims.