Struct AccessTokenKeyMaterial 

pub struct AccessTokenKeyMaterial {
    pub encrypted_payload: EncString,
    pub key: EncString,
    seed: AccessTokenSeed,
}

Key material for a new access-token registration.

Fields

encrypted_payload: EncString

The organization key, encrypted under the derived key, for the token holder.

key: EncString

The derived key’s base64, encrypted under the organization key, so the organization can recover it without the token.

seed: AccessTokenSeed

Only reachable through Self::into_seed.

Implementations

impl AccessTokenKeyMaterial

pub fn into_seed(self) -> AccessTokenSeed

Consumes the key material to recover its seed.

pub fn make<Ids: KeySlotIds>( ctx: &mut KeyStoreContext<'_, Ids>, organization_key: Ids::Symmetric, purpose: KeyPurpose, ) -> Result<Self, AccessTokenError>

Makes a random seed, derives the key for purpose, and wraps the organization key for the token holder and the derived key for the organization.

A missing organization_key surfaces as AccessTokenError::Crypto.