Enum CredentialShape 

pub enum CredentialShape {
    MintAndRevoke,
    MintExpiryOnly,
    RefreshBroker,
    StaticCustody,
    Federation,
}

Which of the five delegation shapes an engine implements. The shape is the single most useful thing to know about a credential, because it says what a lease can actually promise — see docs/delegation/README.md.

Variants

MintAndRevoke

A — minted on demand and destroyed on demand. A lease means what it says.

MintExpiryOnly

B — minted on demand, but the provider cannot un-mint it. TTL is the only containment, and revoke() is advisory.

RefreshBroker

C — the durable half stays here, only a short access token is handed out.

StaticCustody

D — nothing is mintable; this is encrypted custody plus rotation.

Federation

E — no credential exists anywhere; the consumer’s own identity is trusted.

Implementations

impl CredentialShape

pub fn revocable(self) -> bool

Whether revoking the lease destroys the credential the consumer received. That is the only question a consumer is actually asking, and answering it narrowly keeps the _doc block honest.

Only shape A can say yes. A refresh broker can kill the durable half — which stops future issuance — but the access token already handed out lives until it expires, so from the consumer’s point of view its lease is not revocable either.

pub fn as_str(self) -> &'static str

Trait Implementations

impl Clone for CredentialShape

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for CredentialShape

impl Debug for CredentialShape

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for CredentialShape

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for CredentialShape

impl PartialEq for CredentialShape

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for CredentialShape

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for CredentialShape