authority

Module: config::authority

Contents

Structs

• AuthorityConfig - Tuning for background Authority stream clients.

---

firma_sidecar::config::authority::AuthorityConfig

Struct

Tuning for background Authority stream clients.

Fields:

• url: Option<String> - Authority gRPC URL (e.g. https://127.0.0.1:9443). When set, the
• connect_timeout_secs: u64 - Connection timeout in seconds.
• reconnect_min_backoff_ms: u64 - Minimum reconnect backoff in milliseconds.
• reconnect_max_backoff_secs: u64 - Maximum reconnect backoff in seconds.
• revocation_readiness_grace_ms: u64 - Grace period before the revocation stream is considered ready.
• revocation_fail_closed_on_disconnect: bool - Flip revocation readiness back to false on disconnect.
• public_key_path: Option<std::path::PathBuf> - Path to the Authority’s PASETO v4 Ed25519 public key (32 raw
• ca_cert_path: Option<std::path::PathBuf> - Path to the PEM-encoded CA certificate used to verify the Authority’s
• allow_insecure_remote_authority: bool - Allow an insecure plain http:// authority URL to a non-loopback
• tls_client_cert_path: Option<std::path::PathBuf> - Path to the PEM-encoded mTLS client certificate presented to the
• tls_client_key_path: Option<std::path::PathBuf> - Path to the PEM-encoded mTLS client private key. Must be set
• credentials: Option<crate::authority_credentials::SidecarCredentialsConfig> - Credentials presented on each outbound Authority RPC.

Methods:

• fn validate(self: &Self) -> Result<(), String> - Validate authority client tuning.

Trait Implementations:

• Default
  • fn default() -> Self
• Clone
  • fn clone(self: &Self) -> AuthorityConfig
• Deserialize
  • fn deserialize<__D>(__deserializer: __D) -> _serde::__private228::Result<Self, <__D as >::Error>
• Debug
  • fn fmt(self: &Self, f: & mut $crate::fmt::Formatter) -> $crate::fmt::Result