Struct HessraClient 

pub struct HessraClient { /* private fields */ }

HTTP client for communicating with a Hessra authorization node.

Implementations

impl HessraClient

pub fn builder() -> HessraClientBuilder

Create a new builder for constructing a client.

pub async fn fetch_public_key(&self) -> Result<PublicKey, ClientError>

Fetch and cache the server’s public key (PEM format).

The key is fetched once and cached for the lifetime of the client. Returns the parsed PublicKey suitable for local token verification.

pub async fn request_token( &self, request: &TokenRequest, ) -> Result<TokenResponse, ClientError>

Request a capability token (mTLS-authenticated).

pub async fn request_token_with_identity( &self, request: &TokenRequest, identity_token: &str, ) -> Result<TokenResponse, ClientError>

Request a capability token using an identity token for authentication.

pub async fn verify_token( &self, request: &VerifyTokenRequest, ) -> Result<VerifyTokenResponse, ClientError>

Verify a token remotely via the authorization service.

pub async fn request_identity_token( &self, request: &IdentityTokenRequest, ) -> Result<IdentityTokenResponse, ClientError>

Request an identity token (mTLS-authenticated).

pub async fn refresh_identity_token( &self, request: &RefreshIdentityTokenRequest, ) -> Result<IdentityTokenResponse, ClientError>

Refresh an existing identity token.

pub async fn health(&self) -> Result<HealthResponse, ClientError>

Health check.