Struct CredentialDialer 

pub struct CredentialDialer { /* private fields */ }

Reusable handle for the control plane’s CredentialService — the admin-gated live enrollment, rotation, and revocation surface over State’s credential authority.

Shares the AgentService endpoint — all these services are served on one internal Connect port — so it is built from the same address. Every RPC on this service requires the #803 admin service credential before it looks at anything else in the request body, so unlike PersonaDialer this dialer has no unauthenticated new: it is built ONLY through Self::new_admin.

Implementations

impl CredentialDialer

pub fn new_admin(addr: &str, bearer: &str) -> Result<Self, DialError>

Build a dialer pointed at addr, presenting bearer as the #803 admin service credential (Authorization: Bearer pc_<id>_<secret>, a current record in State’s credential authority carrying admin access) every CredentialService RPC checks before it will even look at the request body.

Errors

Returns DialError::InvalidAddress if addr isn’t a valid URI, DialError::InvalidBearer if bearer can’t be encoded as an HTTP header value, or DialError::Tls if an https endpoint’s TLS setup fails.

pub async fn list_credentials_page( &self, after: Option<&str>, ) -> Result<CredentialSummaryPage, DialError>

One bounded page of stored records: id, principal, namespaces, and each key’s id, lifecycle state, and expiry. Never any secret material — the control plane refuses to send a salt, digest, or public key (INV-C3).

Errors

Returns DialError::Connect for any transport/encoding error, including permission_denied for a missing or invalid admin bearer.

pub async fn list_credentials( &self, ) -> Result<Vec<CredentialRecordSummary>, DialError>

Reads every bounded page in canonical order.

The protocol remains paginated, so no response can exceed the credential-family wire bound. This convenience method is itself bounded by State’s deployment-wide credential-count limit.

Errors

Returns DialError::Connect for any page transport/encoding error.

pub async fn enroll_credential( &self, enrollment: CredentialEnrollment, ) -> Result<EnrolledCredential, DialError>

Create a record with its first key from an operator-supplied verifier. Refuses (already_exists) if edge_id is already enrolled — add a key to rotate an existing record instead.

grants_edge admits the record at the control plane’s transport gate and lets its keys sign a turn’s identity envelope; grants_admin makes it an admin service credential. A record needs at least one, and a credential that must reach a doubly-gated RPC — every PersonaService admin verb, RoutineService.FireRoutine — needs both, since one presented bearer clears two independent checks.

Errors

Returns DialError::Connect for any transport/encoding error, including invalid_argument when neither capability is granted.

pub async fn add_credential_key( &self, operation_id: &str, edge_id: &str, key: CredentialVerifier, ) -> Result<AddedCredentialKey, DialError>

Append a new active key to edge_id — step 2 of a rotation. The key(s) currently active drop to retiring and keep verifying until Self::retire_credential_key names them (INV-C2): there is no instant in which a correctly-configured caller is refused.

Errors

Returns DialError::Connect for any transport/encoding error, including not_found for an unknown edge_id.

pub async fn retire_credential_key( &self, operation_id: &str, edge_id: &str, kid: &str, ) -> Result<RetiredCredentialKey, DialError>

Mark a retiring key revoked — step 5 of a rotation. It never verifies again.

Errors

Returns DialError::Connect for any transport/encoding error, including failed_precondition when kid isn’t currently retiring.

pub async fn revoke_credential( &self, operation_id: &str, edge_id: &str, ) -> Result<RevokedCredential, DialError>

Kill a whole credential immediately. Every one of its keys stops verifying and the record is removed from the store, so a restart cannot bring it back (INV-C1).

Errors

Returns DialError::Connect for any transport/encoding error, including not_found for an unknown edge_id.

Trait Implementations

impl Clone for CredentialDialer

fn clone(&self) -> CredentialDialer

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.