Struct FormationAuthority 

pub struct FormationAuthority { /* private fields */ }

A formation’s signing key: generated by the launcher for one formation and held in its memory alone. Dropping it — at teardown — leaves nothing that can mint for that formation again.

ring keeps the expanded key in its own type, which does not zeroize on drop; the seed it was built from is zeroized here as soon as the key pair exists.

Implementations

impl FormationAuthority

pub fn generate(formation_id: &FormationId) -> Result<Self, String>

A fresh key pair for formation_id, from the operating system’s CSPRNG.

The Err is the operating system refusing randomness, and carries no key material.

pub fn formation_id(&self) -> &FormationId

pub fn mint(&self, from: &str, to: &str) -> FormationToken

The token from presents at to’s door.

pub fn verify_key(&self) -> FormationVerifyKey

The public half, which every member’s door verifies with.

pub fn member_bundle(&self, member: &str, callees: &[&str]) -> FormationBundle

What member is handed on its channel’s first line: the formation, its own name, the verification key, and one token per name in callees, in the order given.

Trait Implementations

impl Debug for FormationAuthority

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Names the formation and nothing that signs.