authority

Module: authority

Contents

Structs

• AuthorityConfig - Behavior-free representation of [authority].

---

firma_config_schema::authority::AuthorityConfig

Struct

Behavior-free representation of [authority].

TLS fields remain direct members so the public TOML keys stay flat without relying on Serde flatten, which is incompatible with reliable unknown-key rejection.

Fields:

• listen_addr: String - gRPC listen address (default: [::1]:50051).
• policy_dir: std::path::PathBuf - Directory containing enforcement policy files.
• issuance_policy_dir: std::path::PathBuf - Directory containing capability-issuance policy files.
• schema_path: Option<std::path::PathBuf> - Optional path to the Cedar schema file.
• revocation_file: std::path::PathBuf - Path to the revocation file.
• max_ttl: crate::utils::NonZeroDuration - Strictly non-zero maximum token TTL.
• key_file: std::path::PathBuf - Path to the Ed25519 signing key file.
• bundle_ttl: crate::utils::NonZeroDuration - Strictly non-zero policy bundle TTL advertised to Sidecars.
• tls_cert_path: Option<std::path::PathBuf> - Path to the TLS certificate file.
• tls_key_path: Option<std::path::PathBuf> - Path to the TLS private key file.
• mtls_client_ca_cert_path: Option<std::path::PathBuf> - Path to the CA certificate used to verify Sidecar mTLS clients.
• mtls_client_ca_key_path: Option<std::path::PathBuf> - Path to the CA key used to issue Sidecar client certificates.
• authorized_clients_path: Option<std::path::PathBuf> - Path to the authorized-client identities file.

Trait Implementations:

• Debug
  • fn fmt(self: &Self, f: & mut $crate::fmt::Formatter) -> $crate::fmt::Result
• Clone
  • fn clone(self: &Self) -> AuthorityConfig
• Deserialize
  • fn deserialize<__D>(__deserializer: __D) -> _serde::__private228::Result<Self, <__D as >::Error>
• Serialize
  • fn serialize<__S>(self: &Self, __serializer: __S) -> _serde::__private228::Result<<__S as >::Ok, <__S as >::Error>
• Default
  • fn default() -> Self