Struct ControlPlaneMinter 

pub struct ControlPlaneMinter { /* private fields */ }

Mints proxy tokens for one MicroVM through the control plane.

The bridge between the two lanes: ControlPlane::mint_auth_token answers a control::ProxyToken, TokenMinter wants a session::ProxyToken, and the From impl at session/proxy.rs is the conversion — one .into() at the boundary, which is why that impl is From rather than a named function.

The plane sits behind an Arc rather than a reference because the minter must outlive the call that built the session: minting happens inside the request path on every later request, which is what makes it happen at all (TRAP-9).

Public so a driving adapter that builds its own session mints through this rather than a copy of it.

Implementations

impl ControlPlaneMinter

pub fn new( control: Arc<ControlPlane>, microvm_id: impl Into<String>, ) -> ControlPlaneMinter

A minter for microvm_id’s tokens, through control.

Trait Implementations

impl Debug for ControlPlaneMinter

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl TokenMinter for ControlPlaneMinter

fn mint_for_ports( &self, ports: &[u16], ) -> Pin<Box<dyn Future<Output = Result<ProxyToken, Error>> + Send + '_>>

Overrides the default, which ignores the ports and delegates.

This is the minter that has a control plane behind it, so it is the one that can actually widen a token’s scope — and without this override Session::connect_headers(8080) would keep answering a header pair behind a token scoped to 9000 only, which the proxy refuses with 403 Access to port denied. See TokenMinter::mint_for_ports for the measurement.

fn mint( &self, ) -> Pin<Box<dyn Future<Output = Result<ProxyToken, Error>> + Send + '_>>

Mints a token for the session’s own port. The hot path.