Struct ServiceToken 

pub struct ServiceToken {
    pub token_id: String,
    pub principal: String,
    pub scopes: Vec<String>,
    pub secret_hash_phc: String,
    pub expires_unix: u64,
}

Service token metadata. The raw bearer secret is never stored.

Fields

token_id: String

principal: String

scopes: Vec<String>

secret_hash_phc: String

Argon2id PHC string with a unique random salt.

expires_unix: u64

Implementations

impl ServiceToken

pub fn mint( token_id: impl Into<String>, principal: impl Into<String>, scopes: Vec<String>, raw_secret: &str, expires_unix: u64, ) -> Result<Self, SecurityHardeningError>

pub fn verify_secret(&self, raw_secret: &str, now_unix: u64) -> bool

pub fn issue( token_id: impl Into<String>, principal: impl Into<String>, scopes: Vec<String>, expires_unix: u64, ) -> Result<IssuedServiceToken, SecurityHardeningError>

Issue a random 256-bit bearer secret. The caller receives it once.

Trait Implementations

impl Clone for ServiceToken

fn clone(&self) -> ServiceToken

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ServiceToken

fn fmt(&self, formatter: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for ServiceToken

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for ServiceToken

impl PartialEq for ServiceToken

fn eq(&self, other: &ServiceToken) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for ServiceToken

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for ServiceToken