Enum Kid 

#[non_exhaustive]
pub enum Kid {
    Cur,
    Prev,
    Named(String),
}

Which key in the crate::KeyRing a token was signed with. Tokens name their key so rotation never breaks links in flight.

The two positional names are what the environment-derived runtimes wire (HARNESS_SECRET is Cur, HARNESS_SECRET_PREVIOUS is Prev); legacy tokens from the flat current/previous scheme carry exactly these names (issue #137). A ring built programmatically can give its keys stable Kid::Named labels instead, so an entry keeps its identity as it moves from signing to verification-only.

Variants (Non-exhaustive)

Non-exhaustive enums could have additional variants added in future. Therefore, when matching against variants of non-exhaustive enums, an extra wildcard arm must be added to account for any future variants.

Cur

The current signing key.

Prev

The previous key (verification-only unless explicitly revoked).

Named(String)

A stable, operator-chosen key label (kebab-case or short slug; the reference signer caps the wire form at MAX_KID_NAME characters).

Implementations

impl Kid

pub fn named(name: impl Into<String>) -> Self

A stable operator-chosen key id for a programmatically built ring.

Trait Implementations

impl Clone for Kid

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Kid

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for Kid

impl PartialEq for Kid

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for Kid