Struct ProxyToken 

pub struct ProxyToken { /* private fields */ }

The minted proxy token, as a header map (TRAP-7).

Why a map rather than a string

Because that is what the service answers: authToken is a TokenParts map, and the value at X-aws-proxy-auth is the header value. A client that treated the response as a string would send a stringified map and get a rejection that reads like a bad token.

ProxyToken::headers always emits both headers, which is the other half of the same trap: X-aws-proxy-auth without X-aws-proxy-port is rejected the same indistinguishable way.

Implementations

impl ProxyToken

pub fn from_map( map: &BTreeMap<String, String>, port: u16, ) -> Result<Self, Error>

Reads the token out of the service’s authToken map.

A missing X-aws-proxy-auth key is ErrorKind::Retryable via crate::error::WireKind::AuthTokenMint: minting is inside the request retry path (TRAP-9), and a throttle at minute 30 of a long run must not kill a trial that is otherwise healthy.

pub fn from_operation_map( operation: &str, map: &BTreeMap<String, String>, port: u16, ) -> Result<Self, Error>

ProxyToken::from_map, naming the operation whose response the map came from.

The shell mint reads the same TokenParts shape out of CreateMicrovmShellAuthToken, and a missing-key failure that blamed the ordinary mint would send the reader to the wrong operation’s response.

pub fn headers(&self) -> [(&'static str, String); 2]

Both headers every endpoint request needs.

Both, always. See the type docs: sending only the auth header is rejected in a way that reads like a bad token.

pub fn value(&self) -> &str

The raw token value.

pub fn port(&self) -> u16

The port the token was minted for.

Trait Implementations

impl Clone for ProxyToken

fn clone(&self) -> ProxyToken

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ProxyToken

Names the headers and the port, never the token value.

A minted proxy token is a credential, and a derived Debug would print it into every log line that formats a ProxyToken, a RunMicrovmRequest holding one, or an error chain containing either. The sibling type in crate::session::proxy made this choice first; this is the same rule on the control-plane side of the conversion.

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for ProxyToken

impl From<ProxyToken> for ProxyToken

The seam to the control plane’s own token type.

The two lanes that landed this module and crate::control arrived at the same trap closure from different directions: control::ProxyToken keeps the auth value and the port as two fields and emits a fixed pair from headers(), while this one keeps the service’s whole map so a third header the platform adds later rides along without a code change. Neither is wrong, and unifying them would mean one lane editing the other’s module.

So the conversion lives here, which is the side that consumes it. It is the whole of what a caller needs to hand ControlPlane::mint_auth_token’s result to a TokenMinter, and it is From rather than a named function so the wiring is one .into() at the boundary.

fn from(token: ProxyToken) -> Self

Converts to this type from the input type.

impl PartialEq for ProxyToken

fn eq(&self, other: &ProxyToken) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for ProxyToken