pidgr_proto::pidgr::v1::org_security_keys_service_server

Struct OrgSecurityKeysServiceServer

pub struct OrgSecurityKeysServiceServer<T> { /* private fields */ }

Expand description

OrgSecurityKeysService exposes per-org secret key material to internal services that need it for HMAC computation, signature verification, or envelope-key derivation.

AUTH: INTERNAL-mTLS ONLY. Every RPC on this service returns raw key material. The server MUST require a client certificate from a known internal service (allowlisted by subject DN) and MUST reject any request presenting only a JWT. The service MUST NOT be exposed on the public ALB.

Callers (today: pidgr-integrations) cache returned peppers in-process keyed on (org_id, purpose, version) with a short TTL (≤ 5 minutes) to keep dispatch hot-path latency bounded.

Struct OrgSecurityKeysServiceServer Copy item path

Implementations§

impl<T> OrgSecurityKeysServiceServer<T>

pub fn new(inner: T) -> Self

pub fn from_arc(inner: Arc<T>) -> Self

pub fn with_interceptor<F>( inner: T, interceptor: F, ) -> InterceptedService<Self, F>where F: Interceptor,

pub fn accept_compressed(self, encoding: CompressionEncoding) -> Self

pub fn send_compressed(self, encoding: CompressionEncoding) -> Self

pub fn max_decoding_message_size(self, limit: usize) -> Self

pub fn max_encoding_message_size(self, limit: usize) -> Self

Trait Implementations§

impl<T> Clone for OrgSecurityKeysServiceServer<T>

fn clone(&self) -> Self

fn clone_from(&mut self, source: &Self)

impl<T: Debug> Debug for OrgSecurityKeysServiceServer<T>

fn fmt(&self, f: &mut Formatter<'_>) -> Result

impl<T> NamedService for OrgSecurityKeysServiceServer<T>

const NAME: &'static str = SERVICE_NAME

impl<T, B> Service<Request<B>> for OrgSecurityKeysServiceServer<T>where T: OrgSecurityKeysService, B: Body + Send + 'static, B::Error: Into<StdError> + Send + 'static,

type Response = Response<Body>

type Error = Infallible

type Future = Pin<Box<dyn Future<Output = Result<<OrgSecurityKeysServiceServer<T> as Service<Request<B>>>::Response, <OrgSecurityKeysServiceServer<T> as Service<Request<B>>>::Error>> + Send>>

fn poll_ready(&mut self, _cx: &mut Context<'_>) -> Poll<Result<(), Self::Error>>

fn call(&mut self, req: Request<B>) -> Self::Future

Auto Trait Implementations§

impl<T> Freeze for OrgSecurityKeysServiceServer<T>

impl<T> RefUnwindSafe for OrgSecurityKeysServiceServer<T>where T: RefUnwindSafe,

impl<T> Send for OrgSecurityKeysServiceServer<T>where T: Sync + Send,

impl<T> Sync for OrgSecurityKeysServiceServer<T>where T: Sync + Send,

impl<T> Unpin for OrgSecurityKeysServiceServer<T>

impl<T> UnsafeUnpin for OrgSecurityKeysServiceServer<T>

impl<T> UnwindSafe for OrgSecurityKeysServiceServer<T>where T: RefUnwindSafe,

Blanket Implementations§

impl<T> Any for Twhere T: 'static + ?Sized,

fn type_id(&self) -> TypeId

impl<T> Borrow<T> for Twhere T: ?Sized,

fn borrow(&self) -> &T

impl<T> BorrowMut<T> for Twhere T: ?Sized,

fn borrow_mut(&mut self) -> &mut T

impl<T> CloneToUninit for Twhere T: Clone,

unsafe fn clone_to_uninit(&self, dest: *mut u8)

impl<T> From<T> for T

fn from(t: T) -> T

impl<T> FromRef<T> for Twhere T: Clone,

fn from_ref(input: &T) -> T

impl<T, ReqBody, ResBody> GrpcService<ReqBody> for Twhere T: Service<Request<ReqBody>, Response = Response<ResBody>>, <T as Service<Request<ReqBody>>>::Error: Into<Box<dyn Error + Sync + Send>>, ResBody: Body, <ResBody as Body>::Error: Into<Box<dyn Error + Sync + Send>>,

type ResponseBody = ResBody

type Error = <T as Service<Request<ReqBody>>>::Error

type Future = <T as Service<Request<ReqBody>>>::Future

fn poll_ready( &mut self, cx: &mut Context<'_>, ) -> Poll<Result<(), <T as GrpcService<ReqBody>>::Error>>

fn call( &mut self, request: Request<ReqBody>, ) -> <T as GrpcService<ReqBody>>::Future

impl<T> Instrument for T

fn instrument(self, span: Span) -> Instrumented<Self> ⓘ

fn in_current_span(self) -> Instrumented<Self> ⓘ

impl<T, U> Into<U> for Twhere U: From<T>,

fn into(self) -> U

impl<T> IntoRequest<T> for T

fn into_request(self) -> Request<T>

impl<L> LayerExt<L> for L

fn named_layer<S>(&self, service: S) -> Layered<<L as Layer<S>>::Service, S>where L: Layer<S>,

impl<S, R> ServiceExt<R> for Swhere S: Service<R>,

fn into_make_service(self) -> IntoMakeService<S>

fn handle_error<F, T>(self, f: F) -> HandleError<Self, F, T>

impl<T, Request> ServiceExt<Request> for Twhere T: Service<Request> + ?Sized,

fn ready(&mut self) -> Ready<'_, Self, Request> ⓘwhere Self: Sized,

fn ready_oneshot(self) -> ReadyOneshot<Self, Request> ⓘwhere Self: Sized,

fn oneshot(self, req: Request) -> Oneshot<Self, Request> ⓘwhere Self: Sized,

fn call_all<S>(self, reqs: S) -> CallAll<Self, S>where Self: Sized, S: Stream<Item = Request>,

fn and_then<F>(self, f: F) -> AndThen<Self, F>where Self: Sized, F: Clone,

fn map_response<F, Response>(self, f: F) -> MapResponse<Self, F>where Self: Sized, F: FnOnce(Self::Response) -> Response + Clone,

fn map_err<F, Error>(self, f: F) -> MapErr<Self, F>where Self: Sized, F: FnOnce(Self::Error) -> Error + Clone,

fn map_result<F, Response, Error>(self, f: F) -> MapResult<Self, F>where Self: Sized, Error: From<Self::Error>, F: FnOnce(Result<Self::Response, Self::Error>) -> Result<Response, Error> + Clone,

fn map_request<F, NewRequest>(self, f: F) -> MapRequest<Self, F>where Self: Sized, F: FnMut(NewRequest) -> Request,

fn then<F, Response, Error, Fut>(self, f: F) -> Then<Self, F>where Self: Sized, Error: From<Self::Error>, F: FnOnce(Result<Self::Response, Self::Error>) -> Fut + Clone, Fut: Future<Output = Result<Response, Error>>,

fn map_future<F, Fut, Response, Error>(self, f: F) -> MapFuture<Self, F>where Self: Sized, F: FnMut(Self::Future) -> Fut, Error: From<Self::Error>, Fut: Future<Output = Result<Response, Error>>,

fn boxed(self) -> BoxService<Request, Self::Response, Self::Error>where Self: Sized + Send + 'static, Self::Future: Send + 'static,

fn boxed_clone(self) -> BoxCloneService<Request, Self::Response, Self::Error>where Self: Sized + Clone + Send + 'static, Self::Future: Send + 'static,

impl<T> ToOwned for Twhere T: Clone,

type Owned = T

fn to_owned(&self) -> T

Struct OrgSecurityKeysServiceServer

pub fn with_interceptor<F>( inner: T, interceptor: F, ) -> InterceptedService<Self, F>
where F: Interceptor,

impl<T, B> Service<Request<B>> for OrgSecurityKeysServiceServer<T>
where T: OrgSecurityKeysService, B: Body + Send + 'static, B::Error: Into<StdError> + Send + 'static,

impl<T> RefUnwindSafe for OrgSecurityKeysServiceServer<T>
where T: RefUnwindSafe,

impl<T> Send for OrgSecurityKeysServiceServer<T>
where T: Sync + Send,

impl<T> Sync for OrgSecurityKeysServiceServer<T>
where T: Sync + Send,

impl<T> UnwindSafe for OrgSecurityKeysServiceServer<T>
where T: RefUnwindSafe,

impl<T> Any for T
where T: 'static + ?Sized,

impl<T> Borrow<T> for T
where T: ?Sized,

impl<T> BorrowMut<T> for T
where T: ?Sized,

impl<T> CloneToUninit for T
where T: Clone,

impl<T> FromRef<T> for T
where T: Clone,

impl<T, ReqBody, ResBody> GrpcService<ReqBody> for T
where T: Service<Request<ReqBody>, Response = Response<ResBody>>, <T as Service<Request<ReqBody>>>::Error: Into<Box<dyn Error + Sync + Send>>, ResBody: Body, <ResBody as Body>::Error: Into<Box<dyn Error + Sync + Send>>,

impl<T, U> Into<U> for T
where U: From<T>,

fn named_layer<S>(&self, service: S) -> Layered<<L as Layer<S>>::Service, S>
where L: Layer<S>,

impl<S, R> ServiceExt<R> for S
where S: Service<R>,

impl<T, Request> ServiceExt<Request> for T
where T: Service<Request> + ?Sized,

fn ready(&mut self) -> Ready<'_, Self, Request> ⓘ
where Self: Sized,

fn ready_oneshot(self) -> ReadyOneshot<Self, Request> ⓘ
where Self: Sized,

fn oneshot(self, req: Request) -> Oneshot<Self, Request> ⓘ
where Self: Sized,

fn call_all<S>(self, reqs: S) -> CallAll<Self, S>
where Self: Sized, S: Stream<Item = Request>,

fn and_then<F>(self, f: F) -> AndThen<Self, F>
where Self: Sized, F: Clone,

fn map_response<F, Response>(self, f: F) -> MapResponse<Self, F>
where Self: Sized, F: FnOnce(Self::Response) -> Response + Clone,

fn map_err<F, Error>(self, f: F) -> MapErr<Self, F>
where Self: Sized, F: FnOnce(Self::Error) -> Error + Clone,

fn map_result<F, Response, Error>(self, f: F) -> MapResult<Self, F>
where Self: Sized, Error: From<Self::Error>, F: FnOnce(Result<Self::Response, Self::Error>) -> Result<Response, Error> + Clone,

fn map_request<F, NewRequest>(self, f: F) -> MapRequest<Self, F>
where Self: Sized, F: FnMut(NewRequest) -> Request,

fn then<F, Response, Error, Fut>(self, f: F) -> Then<Self, F>
where Self: Sized, Error: From<Self::Error>, F: FnOnce(Result<Self::Response, Self::Error>) -> Fut + Clone, Fut: Future<Output = Result<Response, Error>>,

fn map_future<F, Fut, Response, Error>(self, f: F) -> MapFuture<Self, F>
where Self: Sized, F: FnMut(Self::Future) -> Fut, Error: From<Self::Error>, Fut: Future<Output = Result<Response, Error>>,

fn boxed(self) -> BoxService<Request, Self::Response, Self::Error>
where Self: Sized + Send + 'static, Self::Future: Send + 'static,

fn boxed_clone(self) -> BoxCloneService<Request, Self::Response, Self::Error>
where Self: Sized + Clone + Send + 'static, Self::Future: Send + 'static,

impl<T> ToOwned for T
where T: Clone,

impl<T, U> TryFrom<U> for T
where U: Into<T>,

impl<T, U> TryInto<U> for T
where U: TryFrom<T>,

fn with_subscriber<S>(self, subscriber: S) -> WithDispatch<Self> ⓘ
where S: Into<Dispatch>,