Struct RotationEventPayload 

pub struct RotationEventPayload {
    pub version: u32,
    pub from_algorithm: SigningAlgorithm,
    pub from_key_id: String,
    pub from_public_key_b64: String,
    pub to_algorithm: SigningAlgorithm,
    pub to_key_id: String,
    pub to_public_key_b64: String,
    pub issued_at: DateTime<Utc>,
    pub transition_until: DateTime<Utc>,
}

Inner payload of a RotationEvent — the bytes that get signed.

Serialized via serde_jcs (RFC 8785 canonical JSON) so the byte representation is stable across hosts. Any drift in field order or number encoding silently invalidates the signature, so canonical JSON is non-negotiable.

Fields

version: u32

Schema version. Always 1 for this crate.

from_algorithm: SigningAlgorithm

Algorithm of the from key — what signed this payload.

from_key_id: String

Opaque id of the previous key (e.g. KMS ARN).

from_public_key_b64: String

SubjectPublicKeyInfo (DER) of the previous key, base64-encoded.

to_algorithm: SigningAlgorithm

Algorithm of the to key.

to_key_id: String

Opaque id of the new key.

to_public_key_b64: String

SubjectPublicKeyInfo (DER) of the new key, base64-encoded.

issued_at: DateTime<Utc>

UTC instant at which the transition window opened.

transition_until: DateTime<Utc>

UTC instant after which the previous key should no longer be trusted. Plugin-hosts MUST evict the from key from their trust cache once their wall clock passes this.

Trait Implementations

impl Clone for RotationEventPayload

fn clone(&self) -> RotationEventPayload

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for RotationEventPayload

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for RotationEventPayload

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for RotationEventPayload

fn eq(&self, other: &RotationEventPayload) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for RotationEventPayload

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl Eq for RotationEventPayload

impl StructuralPartialEq for RotationEventPayload