Struct SpiffeTrustManager 

pub struct SpiffeTrustManager { /* private fields */ }

SPIFFE Trust Manager: maintains trust bundles and validates SVIDs.

Implementations

impl SpiffeTrustManager

pub fn new() -> Self

pub async fn add_trust_bundle( &self, trust_domain: &str, ca_certs_der: Vec<Vec<u8>>, )

Register a trust bundle for a trust domain.

pub async fn has_trust_bundle(&self, trust_domain: &str) -> bool

Check if a trust bundle exists for the given domain.

pub async fn get_trust_bundle(&self, trust_domain: &str) -> Option<Vec<Vec<u8>>>

Get the trust bundle for a domain.

pub async fn remove_trust_bundle(&self, trust_domain: &str) -> bool

Remove a trust bundle.

pub async fn add_policy(&self, policy: SpiffeAuthzPolicy)

Add an authorization policy.

pub async fn is_authorized( &self, source: &SpiffeId, destination: &SpiffeId, action: &str, ) -> bool

Check if a workload-to-workload call is authorized.

pub async fn verify_jwt_svid( &self, token: &str, expected_audience: &str, ) -> Result<ValidatedJwtSvid>

Validate a JWT-SVID and check that its trust domain is in our bundles.

pub async fn trust_domains(&self) -> Vec<String>

List all registered trust domains.

Trait Implementations

impl Default for SpiffeTrustManager

fn default() -> Self

Returns the “default value” for a type.