Struct SnapshotIssuer 

pub struct SnapshotIssuer { /* private fields */ }

Mints membership snapshots under the issuer key.

kid must be published in the JWKS with the issuer role; edges refuse any other. Like a standing binding, a snapshot has no exp, so a kid that has signed snapshots stays published until every one of them is superseded (see cheers_verify::standing, “Key rotation rule”).

Implementations

impl SnapshotIssuer

pub const DEFAULT_REFRESH_AFTER_SECONDS: i64

7 days, like StandingBinder. Advisory: how long until a holder that can reach the issuer fetches a fresher snapshot. It never bounds how long one is valid.

pub const MINT_ATTEMPTS: usize = 5

How many times mint re-walks when a write lands under it before giving up with Error::SnapshotContended.

pub fn new( store: impl OwnershipStore + 'static, schema: Arc<SchemaRegistry>, minter: PasetoV4SecretMinter, issuer: impl Into<String>, kid: impl Into<String>, ) -> Self

pub fn with_refresh_after(self, seconds: i64) -> Self

pub fn issuer(&self) -> &str

pub async fn mint( &self, kind: &str, id: &str, now: i64, ) -> Result<SignedSetSnapshot, Error>

Snapshot (kind, id)’s members from live tuples and sign it. The epoch is the ownership version the walk read at (module docs).

Trait Implementations

impl Debug for SnapshotIssuer

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.