pub struct CredentialSection {
pub agent_token_ttl_days: Option<u64>,
pub replace_interval_secs: Option<u64>,
}Expand description
The bearer credential provisioning mints for a freshly created account.
Reload: needs a restart. The value is read once, into the provisioner that issues every later token.
Fields§
§agent_token_ttl_days: Option<u64>How long a freshly issued agent token is good for, in days. Mirrors
didbot_pds::credential::DEFAULT_AGENT_TOKEN_TTL.
Reasonable range: 1 to 3650 — a day to ten years. There is no
rotation path for this token (didbot_pds::credential’s own doc): an
account whose token has expired is provisioned again, so the low end
suits a deployment that already re-provisions often and the high end
suits one that would rather live with a long-lived credential than
re-provision at all. The built-in default is 365, long enough that a
running deployment never meets the expiry in the ordinary course of
things.
replace_interval_secs: Option<u64>The shortest time between two of an account’s own credential
replaces through bot.did.updateCredentials, in seconds. Mirrors
didbot_pds::DEFAULT_REPLACE_INTERVAL.
Reasonable range: 10 to 3600 — ten lets a test replace twice in one run, and an hour is still far below any schedule a host keeps. Every replace stays in the account’s ledger for good, and this bounds how fast an account grows it. The built-in default is 60.
Trait Implementations§
Source§impl Clone for CredentialSection
impl Clone for CredentialSection
Source§fn clone(&self) -> CredentialSection
fn clone(&self) -> CredentialSection
1.0.0 (const: unstable) · Source§fn clone_from(&mut self, source: &Self)
fn clone_from(&mut self, source: &Self)
source. Read moreSource§impl Debug for CredentialSection
impl Debug for CredentialSection
Source§impl Default for CredentialSection
impl Default for CredentialSection
Source§fn default() -> CredentialSection
fn default() -> CredentialSection
Source§impl<'de> Deserialize<'de> for CredentialSection
impl<'de> Deserialize<'de> for CredentialSection
Source§fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>where
__D: Deserializer<'de>,
fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>where
__D: Deserializer<'de>,
Source§impl PartialEq for CredentialSection
impl PartialEq for CredentialSection
Source§fn eq(&self, other: &CredentialSection) -> bool
fn eq(&self, other: &CredentialSection) -> bool
self and other values to be equal, and is used by ==.