Struct DelegationSigner

pub struct DelegationSigner { /* private fields */ }

Signer that mints JWS tokens.

Implementations

impl DelegationSigner

pub fn generate() -> Self

Generate a fresh Ed25519 signing key.

Examples

use agentguard_core::DelegationSigner;
let signer = DelegationSigner::generate();
let _public_key = signer.public_key_b64();

pub fn from_bytes(bytes: &[u8]) -> Result<Self>

Construct from raw 32-byte Ed25519 secret bytes.

Errors

Returns Error::InvalidToken if bytes is not exactly 32 bytes.

pub fn public_key_b64(&self) -> String

pub fn verifying_key(&self) -> VerifyingKey

pub fn key_id(&self) -> &str

pub fn set_key_id(&mut self, id: impl Into<String>)

pub fn mint( &self, iss: impl Into<String>, sub: impl Into<String>, aud: impl Into<String>, allowed_actions: Vec<String>, resource_patterns: Vec<String>, cfg: DelegationConfig, ) -> Result<DelegationToken>

Mint a delegation token with the given configuration.

pub fn mint_with<F>( &self, iss: impl Into<String>, sub: impl Into<String>, aud: impl Into<String>, allowed_actions: Vec<String>, resource_patterns: Vec<String>, cfg: DelegationConfig, mutate: F, ) -> Result<DelegationToken>

where F: FnOnce(&mut DelegationClaims),

Mint a delegation token with a callback to mutate the claims before signing.

pub fn mint_attenuated( &self, parent: &VerifiedDelegation, spec: DelegationSpec, ) -> Result<DelegationToken>

Mint a child grant that cannot outlive or broaden the supplied, cryptographically verified parent grant.

Actions must be present in the parent grant. Literal child resources must match a parent resource pattern; child patterns containing * are accepted only when identical to a parent pattern. If the parent has constraints, the child must preserve all of them and may add stricter conjunctive constraints.

pub fn sign_jws(&self, claims: &DelegationClaims) -> Result<DelegationToken>

Sign a JWS with the given claims.

Trait Implementations

impl Clone for DelegationSigner

fn clone(&self) -> DelegationSigner

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for DelegationSigner

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.