cedar_loader

Module: cedar_loader

Contents

Structs

• CedarPolicyStore - Thread-safe Cedar policy store with hot-reload support.
• CedarPolicyStoreWatcher - Owns the file watcher and reload task for a [CedarPolicyStore].
• PolicyState - All mutable policy state kept under a single lock for atomic swaps.

---

firma_authority::cedar_loader::CedarPolicyStore

Struct

Thread-safe Cedar policy store with hot-reload support.

All policy state (PolicySet, Schema, PolicyBundle) is held under a single RwLock so that reload() updates are atomic — no reader ever sees a new policy set paired with a stale schema or bundle.

Methods:

• fn load(policy_dir: &Path, schema_path: Option<PathBuf>, bundle_ttl_seconds: u32) -> Result<Self> - Load policies from policy_dir and construct the store.

Trait Implementations:

• Clone
  • fn clone(self: &Self) -> CedarPolicyStore

firma_authority::cedar_loader::CedarPolicyStoreWatcher

Struct

Owns the file watcher and reload task for a [CedarPolicyStore]. Dropping this handle stops the file watch and the reload task.

Methods:

• fn abort(self: &Self) - Abort the background reload task immediately.

Trait Implementations:

• Deref
  • fn deref(self: &Self) -> &<Self as >::Target

firma_authority::cedar_loader::PolicyState

Struct

All mutable policy state kept under a single lock for atomic swaps.

Trait Implementations:

• Clone
  • fn clone(self: &Self) -> PolicyState