Struct HttpOobiResolver 

pub struct HttpOobiResolver { /* private fields */ }

An SSRF-hardened HTTP client for the OOBI static KEL layout.

Implementations

impl HttpOobiResolver

pub fn new(base_url: impl Into<String>) -> Result<Self, HttpOobiError>

Build a resolver for base_url. The client follows no redirects (so a 3xx to a private IP cannot exfiltrate) and inherits the hardened timeouts / TLS floor.

Args:

• base_url: The OOBI host base (e.g. https://registry.example).

pub fn allow_private(self, allow: bool) -> Self

Allow plain http and private/loopback hosts — for intranet registries and tests against a local server. Off by default.

pub async fn fetch_kel( &self, prefix: &Prefix, ) -> Result<Vec<Event>, HttpOobiError>

Fetch and parse the KEL for prefix from the OOBI layout.

Applies the SSRF guard, maps HTTP status to the error taxonomy, enforces the size cap, and parses the keri.cesr body (a JSON array of events). Returns raw events — the caller applies the prefix-binding guard.

Args:

• prefix: The did:keri: prefix (AID) to resolve.