Struct TokenSigner 

pub struct TokenSigner { /* private fields */ }

Server-side machinery for minting and verifying tokens.

Implementations

impl TokenSigner

pub fn new(secret: impl AsRef<[u8]>) -> Self

Build a signer from a raw HMAC secret (any length; HMAC accepts it).

pub fn mint( &self, agent_id: impl Into<String>, role: Role, scopes: Vec<String>, ttl: Duration, max_uses: Option<u32>, ) -> CapToken

Mint and sign a CapToken with an explicit max_uses policy. Prefer Self::one_time / Self::session / Self::limited for the common cases.

pub fn verify_sig(&self, token: &CapToken) -> bool

HMAC sig verify (constant-time eq for timing side-channel resistance).

pub fn one_time( &self, agent_id: impl Into<String>, role: Role, scopes: Vec<String>, ttl: Duration, ) -> CapToken

Builder convenience: one-time token.

pub fn session( &self, agent_id: impl Into<String>, role: Role, scopes: Vec<String>, ttl: Duration, ) -> CapToken

Builder convenience: session token (unlimited uses until expire).

pub fn limited( &self, agent_id: impl Into<String>, role: Role, scopes: Vec<String>, ttl: Duration, max_uses: u32, ) -> CapToken

Builder convenience: limited (N uses).

Trait Implementations

impl Clone for TokenSigner

fn clone(&self) -> TokenSigner

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for TokenSigner

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.