Struct RevocationPublisher 

pub struct RevocationPublisher<W> { /* private fields */ }

Signs a store’s current contents as its issuer’s RevocationSet.

kid must be published in the JWKS with the issuer role — replicas refuse a set signed by any other role. keys is the ownership store whose per-resource revocation keys tag membership entries — the same store SnapshotIssuer hands the keys out of.

Implementations

impl<W: RevocationWriter> RevocationPublisher<W>

pub fn new( store: W, keys: Arc<dyn OwnershipStore>, minter: PasetoV4SecretMinter, issuer: impl Into<String>, kid: impl Into<String>, ) -> Self

pub fn issuer(&self) -> &str

pub fn store(&self) -> &W

pub async fn current(&self, now: i64) -> Result<SignedRevocationSet, Error>

The current set as of now, signed. Jtis already lapsed at now (exp <= now) are omitted: the credential is dead on its own signature, and carrying it would let the set grow without bound between gc runs. Re-signed on every call; a set’s bytes are a function of its contents (keys never change), so two calls at one epoch and one set of live entries return equal tokens. Memberships are published as tags, never as (kind, id, user).

Trait Implementations

impl<W> Debug for RevocationPublisher<W>

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.