Struct StaticKeyResolver 

pub struct StaticKeyResolver { /* private fields */ }

In-process key resolver backed by a static HashMap.

Load trusted keys at boot from a config file / KMS / environment once; then look them up by key_id at verify time. For rotation, hold multiple (key_id, key_bytes) pairs simultaneously and remove retired ones on a schedule that exceeds the longest-lived bundle retention period.

Implementations

impl StaticKeyResolver

pub fn new() -> Self

Build an empty resolver.

pub fn with(self, key_id: impl Into<String>, public_key: Vec<u8>) -> Self

Add a (key_id, public_key_bytes) pair to the trust store. Returns self for chained construction.

pub fn insert(&mut self, key_id: impl Into<String>, public_key: Vec<u8>)

Add a key after construction.

Trait Implementations

impl Default for StaticKeyResolver

fn default() -> StaticKeyResolver

Returns the “default value” for a type.

impl KeyResolver for StaticKeyResolver

fn resolve(&self, key_id: &str) -> Option<Vec<u8>>

Return the trusted public key (raw bytes) registered for key_id, or None if the key is unknown.