Struct ScopedKeyRing 

pub struct ScopedKeyRing { /* private fields */ }

A key ring holding scoped access tokens.

The root key is stored as a SecretKey so it is automatically zeroed on drop, preventing lingering key material in freed memory.

Implementations

impl ScopedKeyRing

pub fn new(root_key: [u8; 32]) -> Self

Create a new ScopedKeyRing from a root key.

Takes ownership of the raw bytes and wraps them in a SecretKey that will be zeroed on drop.

pub fn create_token( &mut self, scope: &str, expires_at: Option<u64>, ) -> CryptoResult<&ScopedAccessToken>

Create a scoped access token for the given scope.

pub fn get_key_for_scope(&self, scope: &str) -> Option<&ContentKey>

Get the derived key for a scope if a valid token exists.

pub fn revoke_scope(&mut self, scope: &str) -> bool

Revoke all tokens for a scope.

pub fn can_access(&self, path: &str) -> bool

Check if any valid token grants access to the given path.

pub fn valid_tokens(&self) -> Vec<&ScopedAccessToken>

Get all valid (non-expired) tokens.

pub fn token_count(&self) -> usize

Get the number of tokens (including expired ones).

pub fn prune_expired(&mut self) -> usize

Remove all expired tokens.

Trait Implementations

impl Debug for ScopedKeyRing

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.