Struct CredentialMap 

pub struct CredentialMap {
    pub version: u32,
    pub tokens: Vec<CredentialEntry>,
}

The host-side credential map (areev-auth.json): tokens → principal names, nothing else. No verbs, no namespaces, no raw secrets — a token is referenced by its SHA-256 or by the env var that holds it, so the file is inert if stolen or synced.

Fields

version: u32

tokens: Vec<CredentialEntry>

Implementations

impl CredentialMap

pub fn from_json(s: &str) -> Result<CredentialMap>

Parse and validate. Fail closed: unknown keys, a bad version, an entry with both or neither credential form, or a malformed digest all refuse the whole map.

pub fn resolve(&self, presented: &str) -> Result<&str>

Resolve a presented bearer token to its principal. The error carries no part of the token — a refused secret must not leak into logs.

pub fn resolve_for_memory(&self, presented: &str, memory: &str) -> Result<&str>

Resolve a token FOR ONE MEMORY: like resolve, but a credential carrying a memories scope only authenticates when memory is listed. The refusal is indistinguishable from an unknown token — a scoped credential must not confirm which memories exist.

pub fn knows_principal(&self, principal: &str) -> Result<()>

Whether any credential authenticates as this principal — surfaces that require a known principal name use this to refuse typos early.

Trait Implementations

impl Debug for CredentialMap

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for CredentialMap

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.