Struct SshAuthCredentials 

pub struct SshAuthCredentials {
    pub pubkey: String,
    pub signature: String,
    pub timestamp: i64,
    pub nonce: String,
}

SSH authentication credentials for gRPC metadata.

Contains all the fields needed to authenticate with coven-gateway:

• pubkey: OpenSSH format public key
• signature: Base64-encoded SSH signature of timestamp|nonce
• timestamp: Unix timestamp when credentials were created
• nonce: Random hex string to prevent replay attacks

Fields

pubkey: String

OpenSSH format public key string.

signature: String

Base64-encoded SSH signature of the message {timestamp}|{nonce}.

timestamp: i64

Unix timestamp when these credentials were created.

nonce: String

Random nonce to prevent replay attacks.

Implementations

impl SshAuthCredentials

pub fn new(private_key: &PrivateKey) -> Result<Self>

Create new authentication credentials by signing timestamp|nonce.

Generates a fresh timestamp and nonce, signs the combined message, and packages everything needed for gRPC authentication.

Errors

Returns an error if signing fails or the public key cannot be serialized.

pub fn age_secs(&self) -> i64

Get the age of these credentials in seconds.

Returns the number of seconds since these credentials were created.

pub fn is_stale(&self, ttl_secs: i64) -> bool

Check if these credentials are stale and should be refreshed.

Credentials are considered stale if they are older than the given TTL. The gateway rejects signatures older than 5 minutes (300 seconds), so a typical TTL would be 240 seconds (4 minutes) to refresh early.

pub fn apply_to_request<T>(&self, req: &mut Request<T>) -> Result<()>

Apply credentials to a gRPC request as metadata headers.

Adds the following headers to the request:

• x-ssh-pubkey: The OpenSSH format public key
• x-ssh-signature: The base64-encoded signature
• x-ssh-timestamp: The Unix timestamp as a string
• x-ssh-nonce: The random nonce

Errors

Returns an error if any metadata value is invalid.

Trait Implementations

impl Clone for SshAuthCredentials

fn clone(&self) -> SshAuthCredentials

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SshAuthCredentials

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.