Enum RefreshMaterialProtection 

pub enum RefreshMaterialProtection {
    Passthrough,
    Sealed {
        master_key: String,
    },
}

How refresh tokens are stored / transmitted between server and client.

Sealed carries the master_key instead of scattering it as a sibling field — the type system guarantees the key is present when sealing is enabled.

Variants

Passthrough

Refresh tokens are passed through without server-side sealing.

Sealed

Refresh tokens are sealed (AEAD-encrypted) by the server.

Fields

master_key: String

The AEAD master key used for sealing and unsealing.

Implementations

impl RefreshMaterialProtection

pub fn kind(&self) -> RefreshMaterialProtectionKind

pub fn master_key(&self) -> Option<&str>

Extract the master key reference when in Sealed mode.

Trait Implementations

impl Clone for RefreshMaterialProtection

fn clone(&self) -> RefreshMaterialProtection

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for RefreshMaterialProtection

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for RefreshMaterialProtection

fn default() -> RefreshMaterialProtection

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for RefreshMaterialProtection

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.