Struct LARightStore 

pub struct LARightStore { /* private fields */ }

Managed wrapper around Apple’s singleton LARightStore.

Implementations

impl LARightStore

pub fn shared() -> Result<Self>

Retain the framework singleton store.

Errors

Returns an error if the API is unavailable or the Swift bridge rejects the request.

Examples found in repository

examples/07_right_store.rs (line 13)

fn main() -> Result<(), Box<dyn std::error::Error>> {
    let store = LARightStore::shared()?;
    let right = LARight::new()?;
    let identifier = unique_identifier("store");

    match store.save_right(&right, &identifier) {
        Ok(persisted) => {
            println!("saved state: {:?}", persisted.state()?);
            store.remove_right(&persisted)?;
        }
        Err(error) => {
            println!("save_right expectedly failed in unsigned/headless environments: {error}");
        }
    }

    println!("✅ right-store smoke OK");
    Ok(())
}

examples/08_persisted_right.rs (line 13)

fn main() -> Result<(), Box<dyn std::error::Error>> {
    let store = LARightStore::shared()?;
    let right = LARight::new()?;
    let identifier = unique_identifier("persisted");

    match store.save_right_with_secret(&right, &identifier, b"top-secret") {
        Ok(persisted) => {
            persisted.set_tag(7)?;
            println!("persisted state: {:?}", persisted.state()?);
            println!("persisted tag: {}", persisted.tag()?);
            println!("persisted preflight: {:?}", persisted.check_can_authorize());
            println!("secret bytes: {}", persisted.secret()?.load_data()?.len());
            store.remove_right(&persisted)?;
        }
        Err(error) => {
            println!("persisted-right APIs need entitlements on many systems: {error}");
        }
    }

    println!("✅ persisted-right smoke OK");
    Ok(())
}

examples/09_public_key.rs (line 13)

fn main() -> Result<(), Box<dyn std::error::Error>> {
    let store = LARightStore::shared()?;
    let right = LARight::new()?;
    let identifier = unique_identifier("public-key");

    match store.save_right(&right, &identifier) {
        Ok(persisted) => {
            let public_key = persisted.public_key()?;
            let sign = SecKeyAlgorithm::ecdsa_signature_message_x962_sha256();
            let encrypt =
                SecKeyAlgorithm::ecies_encryption_cofactor_variable_iv_x963_sha256_aes_gcm();

            println!("public key bytes: {}", public_key.export_bytes()?.len());
            println!("can verify: {}", public_key.can_verify_using(&sign)?);
            println!("can encrypt: {}", public_key.can_encrypt_using(&encrypt)?);
            println!(
                "private key can sign: {}",
                persisted.key()?.can_sign_using(&sign)?
            );
            store.remove_right(&persisted)?;
        }
        Err(error) => {
            println!("public-key APIs need entitlements on many systems: {error}");
        }
    }

    println!("✅ public-key smoke OK");
    Ok(())
}

pub fn right_for_identifier(&self, identifier: &str) -> Result<LAPersistedRight>

Fetch a persisted right by identifier.

Errors

Returns a mapped framework or bridge error if the identifier does not resolve.

pub fn save_right( &self, right: &LARight, identifier: &str, ) -> Result<LAPersistedRight>

Persist a right for later reuse.

Errors

Returns a mapped framework or bridge error if persistence fails.

Examples found in repository

examples/07_right_store.rs (line 17)

fn main() -> Result<(), Box<dyn std::error::Error>> {
    let store = LARightStore::shared()?;
    let right = LARight::new()?;
    let identifier = unique_identifier("store");

    match store.save_right(&right, &identifier) {
        Ok(persisted) => {
            println!("saved state: {:?}", persisted.state()?);
            store.remove_right(&persisted)?;
        }
        Err(error) => {
            println!("save_right expectedly failed in unsigned/headless environments: {error}");
        }
    }

    println!("✅ right-store smoke OK");
    Ok(())
}

examples/09_public_key.rs (line 17)

fn main() -> Result<(), Box<dyn std::error::Error>> {
    let store = LARightStore::shared()?;
    let right = LARight::new()?;
    let identifier = unique_identifier("public-key");

    match store.save_right(&right, &identifier) {
        Ok(persisted) => {
            let public_key = persisted.public_key()?;
            let sign = SecKeyAlgorithm::ecdsa_signature_message_x962_sha256();
            let encrypt =
                SecKeyAlgorithm::ecies_encryption_cofactor_variable_iv_x963_sha256_aes_gcm();

            println!("public key bytes: {}", public_key.export_bytes()?.len());
            println!("can verify: {}", public_key.can_verify_using(&sign)?);
            println!("can encrypt: {}", public_key.can_encrypt_using(&encrypt)?);
            println!(
                "private key can sign: {}",
                persisted.key()?.can_sign_using(&sign)?
            );
            store.remove_right(&persisted)?;
        }
        Err(error) => {
            println!("public-key APIs need entitlements on many systems: {error}");
        }
    }

    println!("✅ public-key smoke OK");
    Ok(())
}

pub fn save_right_with_secret( &self, right: &LARight, identifier: &str, secret: &[u8], ) -> Result<LAPersistedRight>

Persist a right together with secret data.

Errors

Returns a mapped framework or bridge error if persistence fails.

Examples found in repository

examples/08_persisted_right.rs (line 17)

fn main() -> Result<(), Box<dyn std::error::Error>> {
    let store = LARightStore::shared()?;
    let right = LARight::new()?;
    let identifier = unique_identifier("persisted");

    match store.save_right_with_secret(&right, &identifier, b"top-secret") {
        Ok(persisted) => {
            persisted.set_tag(7)?;
            println!("persisted state: {:?}", persisted.state()?);
            println!("persisted tag: {}", persisted.tag()?);
            println!("persisted preflight: {:?}", persisted.check_can_authorize());
            println!("secret bytes: {}", persisted.secret()?.load_data()?.len());
            store.remove_right(&persisted)?;
        }
        Err(error) => {
            println!("persisted-right APIs need entitlements on many systems: {error}");
        }
    }

    println!("✅ persisted-right smoke OK");
    Ok(())
}

pub fn remove_right(&self, right: &LAPersistedRight) -> Result<()>

Remove a persisted right.

Errors

Returns a mapped framework or bridge error if removal fails.

Examples found in repository

examples/07_right_store.rs (line 20)

fn main() -> Result<(), Box<dyn std::error::Error>> {
    let store = LARightStore::shared()?;
    let right = LARight::new()?;
    let identifier = unique_identifier("store");

    match store.save_right(&right, &identifier) {
        Ok(persisted) => {
            println!("saved state: {:?}", persisted.state()?);
            store.remove_right(&persisted)?;
        }
        Err(error) => {
            println!("save_right expectedly failed in unsigned/headless environments: {error}");
        }
    }

    println!("✅ right-store smoke OK");
    Ok(())
}

examples/08_persisted_right.rs (line 24)

fn main() -> Result<(), Box<dyn std::error::Error>> {
    let store = LARightStore::shared()?;
    let right = LARight::new()?;
    let identifier = unique_identifier("persisted");

    match store.save_right_with_secret(&right, &identifier, b"top-secret") {
        Ok(persisted) => {
            persisted.set_tag(7)?;
            println!("persisted state: {:?}", persisted.state()?);
            println!("persisted tag: {}", persisted.tag()?);
            println!("persisted preflight: {:?}", persisted.check_can_authorize());
            println!("secret bytes: {}", persisted.secret()?.load_data()?.len());
            store.remove_right(&persisted)?;
        }
        Err(error) => {
            println!("persisted-right APIs need entitlements on many systems: {error}");
        }
    }

    println!("✅ persisted-right smoke OK");
    Ok(())
}

examples/09_public_key.rs (line 31)

fn main() -> Result<(), Box<dyn std::error::Error>> {
    let store = LARightStore::shared()?;
    let right = LARight::new()?;
    let identifier = unique_identifier("public-key");

    match store.save_right(&right, &identifier) {
        Ok(persisted) => {
            let public_key = persisted.public_key()?;
            let sign = SecKeyAlgorithm::ecdsa_signature_message_x962_sha256();
            let encrypt =
                SecKeyAlgorithm::ecies_encryption_cofactor_variable_iv_x963_sha256_aes_gcm();

            println!("public key bytes: {}", public_key.export_bytes()?.len());
            println!("can verify: {}", public_key.can_verify_using(&sign)?);
            println!("can encrypt: {}", public_key.can_encrypt_using(&encrypt)?);
            println!(
                "private key can sign: {}",
                persisted.key()?.can_sign_using(&sign)?
            );
            store.remove_right(&persisted)?;
        }
        Err(error) => {
            println!("public-key APIs need entitlements on many systems: {error}");
        }
    }

    println!("✅ public-key smoke OK");
    Ok(())
}

pub fn remove_right_for_identifier(&self, identifier: &str) -> Result<()>

Remove a persisted right by identifier.

Errors

Returns a mapped framework or bridge error if removal fails.

pub fn remove_all_rights(&self) -> Result<()>

Remove all rights owned by the current client.

Errors

Returns a mapped framework or bridge error if removal fails.

Trait Implementations

impl Debug for LARightStore

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.