Struct CredentialRotationManager 

pub struct CredentialRotationManager { /* private fields */ }

Concurrent credential owner. Readers load one immutable snapshot; writers serialize and publish only after validation and audit succeed.

Implementations

impl CredentialRotationManager

pub fn new( active: ValidatedCredential, break_glass: Option<ValidatedCredential>, maximum_break_glass_duration: Duration, now: SystemTime, audit: Arc<dyn CredentialAuditSink>, ) -> AuthServiceResult<Self>

Creates generation 1 with break-glass disabled by default.

Errors

Returns a redacted error if the active credential is not currently valid or the optional break-glass credential conflicts with it.

pub fn snapshot(&self) -> CredentialRotationSnapshot

pub fn reload_from_provider( &self, provider: &dyn SecretProvider, name: &SecretName, parser: &dyn CredentialBundleParser, overlap_until: SystemTime, now: SystemTime, ) -> AuthServiceResult<u64>

Loads a single atomic provider bundle, parses it completely, then starts rotation.

Errors

Provider and parser failures leave the current snapshot unchanged and emit a rejected audit event. Audit failure also leaves the snapshot unchanged.

pub fn start_rotation( &self, candidate: ValidatedCredential, overlap_until: SystemTime, now: SystemTime, ) -> AuthServiceResult<u64>

Publishes a fully validated candidate as active while retaining the previous active credential for the bounded overlap window.

pub fn finalize_rotation(&self, now: SystemTime) -> AuthServiceResult<u64>

Revokes the retiring credential after the overlap window.

pub fn rollback(&self, now: SystemTime) -> AuthServiceResult<u64>

Rolls back to the unrevoked last-known-good credential and revokes the failed candidate.

pub fn enable_break_glass( &self, reason: BreakGlassReason, expires_at: SystemTime, now: SystemTime, ) -> AuthServiceResult<u64>

pub fn disable_break_glass(&self) -> AuthServiceResult<u64>

pub fn verify( &self, credential_id: &CredentialId, proof: SecretMaterial, now: SystemTime, ) -> AuthServiceResult<CredentialVerification>

Verifies proof against one immutable snapshot.

Trait Implementations

impl Debug for CredentialRotationManager

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.