Struct SpiffeValidator

pub struct SpiffeValidator {
    pub allowed_trust_domains: Vec<String>,
    pub clock_skew: Duration,
    pub workload_endpoint: String,
}

Trust domain allowlist and optional workload endpoint.

Fields

allowed_trust_domains: Vec<String>

clock_skew: Duration

workload_endpoint: String

Path or URL of the SPIFFE Workload API. Default: unix:///run/spire/sockets/agent.sock.

Implementations

impl SpiffeValidator

pub fn new(trust_domain: impl Into<String>) -> Self

pub fn allow_trust_domain(&mut self, domain: impl Into<String>) -> &mut Self

Add another trust domain to the allowlist.

pub fn validate_spiffe_id(&self, id: &str) -> Result<()>

Parse and validate a SPIFFE ID string. A SPIFFE ID looks like spiffe://<trust-domain>/<workload-path>.

pub async fn fetch_svid(&self) -> Result<SpiffeId>

Fetch an SVID stub: returns the trust domain if configured. Useful for testing and when SPIRE isn’t available.

Trait Implementations

impl Clone for SpiffeValidator

fn clone(&self) -> SpiffeValidator

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SpiffeValidator

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.