Struct TokenAuthority 

pub struct TokenAuthority { /* private fields */ }

The token table, backed by chain events.

Implementations

impl TokenAuthority

pub fn new(chain: Arc<ChainManager>, node_id: impl Into<String>) -> Self

Build the authority over chain (no journal) and replay it.

pub fn with_journal( chain: Arc<ChainManager>, node_id: impl Into<String>, journal: Option<PathBuf>, ) -> Self

Build the authority with a durable revocation journal at journal (see the module docs). None means revocations are not crash-durable.

pub fn chain_refs(&self) -> usize

Strong references to the underlying chain (the authority holds one).

pub fn rebuild_at(&self, now: DateTime<Utc>)

Replay the chain and journal: issued minus revoked minus expired at now. Only events from SOURCE count.

pub fn issue( &self, label: &str, ttl: Option<Duration>, project: Option<String>, issuer: &Issuer, ) -> Result<(String, TokenInfo), TokenError>

Issue a token. Returns the secret (shown once) and its metadata.

pub fn issue_at( &self, now: DateTime<Utc>, label: &str, ttl: Option<Duration>, project: Option<String>, issuer: &Issuer, ) -> Result<(String, TokenInfo), TokenError>

Self::issue at an explicit clock.

pub fn issue_project( &self, project_id: &str, ttl: Duration, issuer: &Issuer, ) -> Result<(String, TokenInfo), TokenError>

Issue a TokenScope::Project token for project_id: Write only, never Admin, valid for ttl.

pub fn issue_scoped_at( &self, now: DateTime<Utc>, label: &str, ttl: Option<Duration>, project: Option<String>, scope: TokenScope, issuer: &Issuer, ) -> Result<(String, TokenInfo), TokenError>

Issue with an explicit scope at an explicit clock.

pub fn revoke(&self, id: &str) -> Result<bool, TokenError>

Revoke by id. Returns whether a live token was revoked. The token stops validating immediately even if journaling then fails (the error is returned so the caller knows the revocation may not survive a crash).

pub fn validate(&self, secret: &str) -> Option<TokenInfo>

Validate a presented secret. Compares hashes in constant time.

pub fn validate_at(&self, now: DateTime<Utc>, secret: &str) -> Option<TokenInfo>

Self::validate at an explicit clock.

pub fn list(&self) -> Vec<TokenInfo>

Live tokens, oldest first.

pub fn list_at(&self, now: DateTime<Utc>) -> Vec<TokenInfo>

Self::list at an explicit clock.