Struct StandingBinder 

pub struct StandingBinder { /* private fields */ }

Mints standing bindings under the issuer key.

kid must be published in the JWKS with the issuer role; edges refuse any other. A kid that has signed bindings stays published until every one of them is superseded or revoked — removing it invalidates them (see cheers_verify::standing, “Key rotation rule”).

Implementations

impl StandingBinder

pub const DEFAULT_REFRESH_AFTER_SECONDS: i64

7 days. Advisory: how long until a node that can reach the issuer fetches a successor. It bounds how long an online fleet keeps bindings signed by a kid that has stopped signing, never how long one is valid.

pub fn new( sequences: impl BindingSequenceStore + 'static, minter: PasetoV4SecretMinter, issuer: impl Into<String>, kid: impl Into<String>, ) -> Self

pub fn with_refresh_after(self, seconds: i64) -> Self

pub fn issuer(&self) -> &str

pub async fn revocation_seq( &self, device: &DeviceId, now: i64, ) -> Result<u64, Error>

Consume device’s next sequence number as the bound of a Revoked::Device entry (R732-T7). Every binding minted before sits below it and every binding minted after (re-enrollment) above it — one atomic advance, no read-then-write race against a concurrent mint.

pub async fn mint( &self, sub: UserId, device: DeviceId, peer_key: PeerKey, now: i64, ) -> Result<SignedStandingBinding, Error>

Bind sub to the node keyed peer_key as device: advance the device’s sequence, then sign. A failed sign leaves only a skipped sequence number behind.

Trait Implementations

impl Debug for StandingBinder

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.