Struct GitHubAppProvider 

pub struct GitHubAppProvider {
    pub app_id: String,
    pub installation_id: String,
    pub private_key_pkcs8_der: Vec<u8>,
    pub api_base: String,
    pub client: Client,
}

Mints a GitHub-App installation token: sign a short-lived RS256 JWT with the app’s private key, then exchange it at POST /app/installations/{id}/access_tokens for an installation token (~1 h). The JWT signing is local; the exchange is one HTTP call.

Fields

app_id: String

installation_id: String

private_key_pkcs8_der: Vec<u8>

The app’s RSA private key in PKCS#8 DER (parse from PEM with pkcs8_from_pem).

api_base: String

API base, e.g. https://api.github.com (override for GHES or a test mock).

client: Client

Implementations

impl GitHubAppProvider

pub fn app_jwt(&self, now_ms: u64) -> Result<String, String>

Build the signed app JWT for now_ms (valid 60 s in the past to 9 min ahead, per GitHub’s guidance to tolerate clock skew). Public for testing.

Trait Implementations

impl CredentialProvider for GitHubAppProvider

fn mint( &self, now_ms: u64, ) -> Pin<Box<dyn Future<Output = Result<MintedSecret, String>> + Send + '_>>

Mint a fresh secret as of now_ms.

fn refresh_skew_ms(&self) -> u64

Re-mint this many milliseconds before the cached secret expires, to rotate without a gap. Defaults to one minute.