Struct VapidKey 

pub struct VapidKey { /* private fields */ }

The collector’s VAPID key pair (RFC 8292): a P-256 key generated on the first start and kept in vapid.key (kernel spec §6). Every push subscription is bound to its public key, so the file is never replaced: one that cannot be read stops the start (decision 1). The private key leaves this type only as signatures.

Implementations

impl VapidKey

pub fn generate() -> Self

A fresh key held only in memory: for tests, and for a collector that has not loaded its file yet.

pub fn load_or_create(dir: &Path) -> Result<Self>

The key in dir/vapid.key, created 0600 when there is none. A file there that is not a private, regular, 32-byte P-256 key is an error, never replaced (decision 1).

pub fn public_key(&self) -> &str

The public key, base64url: GET /api/push/vapid.

pub fn authorization( &self, endpoint: &Url, subject: Option<&str>, now: i64, ) -> String

The Authorization header of a push to endpoint at now (RFC 8292 §3): vapid t=<token>, k=<public key>. The token names the endpoint’s origin (audience), subject (subject) when there is one, and an expiry VAPID_TOKEN_SECS ahead.

pub fn token( &self, audience: &str, subject: Option<&str>, expires_at: i64, ) -> String

A JWT (RFC 7519) signed with ES256 (RFC 7515, 7518 §3.4): header {"typ":"JWT","alg":"ES256"}, claims aud, exp and, when there is one, sub, every part base64url without padding (decision 8).

Trait Implementations

impl Debug for VapidKey

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.