Enum AuthSignerConfig 

pub enum AuthSignerConfig {
    Local {
        private_key: String,
    },
    Vault {
        address: String,
        key: String,
        token_env: String,
        alg: SignerAlg,
    },
    AwsKms {
        key_id: String,
        region: Option<String>,
    },
    GcpKms {
        key_version: String,
        access_token_env: String,
    },
    AzureKv {
        vault_url: String,
        key: String,
        key_version: String,
        access_token_env: String,
    },
    Pkcs11 {
        module: String,
        token_label: String,
        key_label: String,
        pin_env: String,
        alg: SignerAlg,
    },
}

External token signer selector (serve.signer). Maps to boatramp_server::signer::SignerConfig; secrets (tokens/PINs) are resolved from the named env vars at startup, never stored in config. Written as a RON enum — signer: Vault(...), signer: AwsKms(...), signer: Pkcs11(...), ….

Variants

Local

In-process key ("<alg>:<hex>").

Fields

private_key: String

The private key spec, "<alg>:<hex>".

Vault

HashiCorp Vault Transit key.

Fields

address: String

Vault base address.

key: String

The Transit key name.

token_env: String

Env var holding the Vault token.

alg: SignerAlg

The key algorithm.

AwsKms

AWS KMS asymmetric key (ES256).

Fields

key_id: String

The KMS key id or ARN.

region: Option<String>

Optional region override.

GcpKms

GCP Cloud KMS key version (ES256).

Fields

key_version: String

The key-version resource name.

access_token_env: String

Env var holding a GCP OAuth2 access token.

AzureKv

Azure Key Vault key (ES256).

Fields

vault_url: String

The vault base URL.

key: String

The key name.

key_version: String

The key version.

access_token_env: String

Env var holding an Azure AD access token.

Pkcs11

PKCS#11 HSM key.

Fields

module: String

Path to the PKCS#11 module.

token_label: String

The token label.

key_label: String

The key’s CKA_LABEL.

pin_env: String

Env var holding the user PIN.

alg: SignerAlg

The key algorithm.

Implementations

impl AuthSignerConfig

pub fn to_signer_config(&self) -> SignerConfig

Map the config-file form to the server’s runtime [SignerConfig].

Trait Implementations

impl Clone for AuthSignerConfig

fn clone(&self) -> AuthSignerConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuthSignerConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for AuthSignerConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.