git_sshripped_recipient 0.3.0

Recipient domain for git-sshripped
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34

# git_sshripped_recipient

Recipient keyring management for git-sshripped.

## Overview

This crate manages the set of SSH public-key recipients authorized to access a
repository. Recipients are stored as TOML files under
`.git-sshripped/recipients/`, keyed by their SHA256 fingerprint.

Key responsibilities:

- **Recipient CRUD** -- add, list, and remove recipients from the keyring.
- **GitHub key fetching** -- fetch SSH public keys for individual GitHub users
  and GitHub team members, using either the `gh` CLI or the REST API with
  ETag-based conditional requests and rate-limit awareness.
- **Fingerprinting** -- compute URL-safe base64 SHA256 fingerprints for SSH
  public keys.
- **Key wrapping** -- wrap and unwrap the repository data key using the `age`
  library's SSH encryption. Each recipient gets an individually encrypted copy
  of the repo key under `.git-sshripped/keys/`.

## Key Functions

- `list_recipients()` / `add_recipient_from_public_key()` /
  `remove_recipient_by_fingerprint()`
- `fetch_github_user_keys()` / `fetch_github_team_members()`
- `wrap_repo_key_for_recipient()` / `wrap_repo_key_for_all_recipients()`
- `fingerprint_for_public_key_line()`

## Usage

Part of the [git-sshripped](https://github.com/BSteffaniak/git-sshripped)
workspace. This crate is not intended for standalone use.