Struct LocalCredentials 

pub struct LocalCredentials { /* private fields */ }

Persistent private-domain identity and epoch-zero key material.

Implementations

impl LocalCredentials

pub fn load(root: impl AsRef<Path>) -> Result<Self, SecurityError>

Loads an existing owner-only encrypted local key vault without creating files.

pub fn load_or_create(root: impl AsRef<Path>) -> Result<Self, SecurityError>

Loads or creates an owner-only encrypted local key vault.

pub fn create_for_domain( root: impl AsRef<Path>, seed: &DomainSeed, ) -> Result<Self, SecurityError>

Creates a new device identity in an existing trusted domain.

pub fn signer(&self) -> IrohSigner

Returns the iroh endpoint signer used by this database.

pub fn domain_key(&self) -> DomainKey

Returns the epoch-zero private-domain key.

pub const fn domain_id(&self) -> DomainId

Returns the stable default private-domain ID.

pub fn domain_seed(&self) -> DomainSeed

Exports sensitive domain bootstrap material for a trusted invitation flow.

pub fn store_domain(&self, seed: &DomainSeed) -> Result<(), SecurityError>

Persists a domain seed in the owner-only encrypted device catalog.

pub fn replace_domain(&self, seed: &DomainSeed) -> Result<(), SecurityError>

Atomically advances a catalog domain while retaining both epoch keys locally.

pub fn load_domain( &self, domain_id: DomainId, ) -> Result<DomainSeed, SecurityError>

Loads one domain seed from the encrypted device catalog.

pub fn load_domain_epoch( &self, domain_id: DomainId, epoch: u64, ) -> Result<DomainSeed, SecurityError>

Loads a retained historical epoch key without changing the active catalog entry.

pub fn domains(&self) -> Result<Vec<DomainId>, SecurityError>

Lists every domain available to this device.

pub fn endpoint_secret_key(&self) -> SecretKey

Returns the same secret identity used to authenticate the iroh endpoint.

Trait Implementations

impl Clone for LocalCredentials

fn clone(&self) -> LocalCredentials

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for LocalCredentials

fn fmt(&self, formatter: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl KeyProvider for LocalCredentials

fn signer(&self) -> IrohSigner

Returns the signer used for immutable database protocol objects.

fn endpoint_secret_key(&self) -> SecretKey

Returns the endpoint secret used by the iroh transport identity.

fn domain_id(&self) -> DomainId

Returns the provider’s default private domain identifier.

fn domain_seed(&self) -> DomainSeed

Returns the provider’s default private domain seed.

fn store_domain(&self, seed: &DomainSeed) -> Result<(), SecurityError>

Persists a newly attached domain seed.

fn stage_domain(&self, seed: &DomainSeed) -> Result<(), SecurityError>

Durably stages an adjacent epoch without activating it.

fn activate_domain(&self, seed: &DomainSeed) -> Result<(), SecurityError>

Atomically selects a retained domain epoch as active.

fn load_domain(&self, domain_id: DomainId) -> Result<DomainSeed, SecurityError>

Loads the active seed for one domain.

fn load_domain_epoch( &self, domain_id: DomainId, epoch: u64, ) -> Result<DomainSeed, SecurityError>

Loads one retained historical domain epoch.

fn domains(&self) -> Result<Vec<DomainId>, SecurityError>

Lists the domains available to this device.

fn domain_key(&self) -> DomainKey

Returns the stable default-domain key used for local authenticated metadata.