Struct ProxyToken 

pub struct ProxyToken { /* private fields */ }

The minted token, as the control plane returns it: a map of header name to value.

Deliberately opaque. There is no as_str, no Display, and no Deref, because the TRAP-7 mistake is treating this value as the token string — and a type that cannot be printed as one cannot be used as one. ProxyToken::auth_value is the only way out, and it names the header it reads so the call site says which key of the map it means.

Implementations

impl ProxyToken

pub fn new(headers: HashMap<String, String>) -> ProxyToken

Wraps the authToken map from a CreateMicrovmAuthToken response.

pub fn from_pairs<I, K, V>(pairs: I) -> ProxyToken

where I: IntoIterator<Item = (K, V)>, K: Into<String>, V: Into<String>,

The map as pairs, for a caller that already has them.

pub fn get(&self, name: &str) -> Option<&str>

One header’s value, matched case-insensitively.

Case-insensitively because HTTP header names are, and the map’s keys come from a service response rather than from this crate: a client that matched X-aws-proxy-auth exactly would break on a response that spelled it x-aws-proxy-auth, and the failure would be a missing header rather than a missing key.

pub fn headers(&self) -> impl Iterator<Item = (&str, &str)>

Every header the token carries, in unspecified order.

Public because the platform’s stated reason for a map is that a scheme may need more than one header, so a client that forwarded only the two it knows about would silently drop a third the service started sending.

pub fn auth_value(&self) -> Result<&str, Error>

The PROXY_AUTH_HEADER value, or a retryable mint failure if the map has no such key.

Retryable rather than a protocol error: an authToken map without the auth header is a control-plane response this client cannot use, which is the same situation as a mint that failed outright, and the same remedy applies.

pub fn is_empty(&self) -> bool

Whether the map carries anything at all.

Trait Implementations

impl Clone for ProxyToken

fn clone(&self) -> ProxyToken

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ProxyToken

Names the keys and never the values.

A proxy token is a credential, and a Debug that printed it would put it in every log line that formats a ProxyAuth or an error chain containing one.

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Default for ProxyToken

fn default() -> ProxyToken

Returns the “default value” for a type.

impl From<ProxyToken> for ProxyToken

The seam to the control plane’s own token type.

The two lanes that landed this module and crate::control arrived at the same trap closure from different directions: control::ProxyToken keeps the auth value and the port as two fields and emits a fixed pair from headers(), while this one keeps the service’s whole map so a third header the platform adds later rides along without a code change. Neither is wrong, and unifying them would mean one lane editing the other’s module.

So the conversion lives here, which is the side that consumes it. It is the whole of what a caller needs to hand ControlPlane::mint_auth_token’s result to a TokenMinter, and it is From rather than a named function so the wiring is one .into() at the boundary.

fn from(token: ProxyToken) -> ProxyToken

Converts to this type from the input type.