Struct SigningKey 

pub struct SigningKey { /* private fields */ }

Implementations

impl SigningKey

pub fn from_ed25519_pem( pem: &[u8], kid: impl Into<String>, ) -> Result<Self, IssueError>

Parse an Ed25519 private key from PEM and pair it with the given kid. Returns KeyParse on any decode failure — the variant name is the audit signal; the wrapped string carries the library’s diagnostic for incident response.

pub fn kid(&self) -> &str

Returns the kid associated with this signer.

pub fn test_pair() -> (Self, KeySet)

Test-only constructor — returns a (SigningKey, KeySet) pair where the KeySet already carries the matching decoding key under the same kid. Round-trip integration tests rely on this contract: issue with the signing half and verify against the key set must agree without manual wiring.

The PEM constants are deterministic across runs (checked-in test material; same key as tests/jwt_negative.rs::TEST_PRIVATE_KEY_PEM), so failures are reproducible. The private key has no production value.