Struct AuthorityIssuer 

pub struct AuthorityIssuer { /* private fields */ }

Trusted in-process issuer. It has no public constructor, so ordinary callers cannot mint capability-bearing permits or supply caller identities as request data.

The operator-token constructor (from_operator_token) is the production path: it requires an explicit secret provided by the operator at process startup. Without that token, no issuer exists and governed mutations fail closed.

Implementations

impl AuthorityIssuer

pub fn from_operator_token(token: &str) -> Option<Self>

Construct an issuer from an operator-provided token.

The token is validated (non-empty, no internal whitespace) but not stored — the issuer is a zero-sized capability that exists only in the process that was started with the correct token. The token itself is consumed and not retained, so it cannot leak through the issuer.

Returns None if the token is empty or invalid, preserving fail-closed semantics for misconfigured deployments.

pub fn mint_operator_system( &self, principal: impl Into<String>, caller_id: impl Into<String>, capability: impl Into<String>, ) -> AuthorityPermit

pub fn mint_with_resolved_evidence( &self, principal: impl Into<String>, caller_id: impl Into<String>, capability: impl Into<String>, evidence: Vec<ResolvedEvidenceDigest>, origin_authority: OriginAuthorityLabelV1, ) -> AuthorityPermit

Trait Implementations

impl Clone for AuthorityIssuer

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.