Struct SigningKeyOptions 

pub struct SigningKeyOptions { /* private fields */ }

Mint-time policy for a signing-key. Grants nothing by default; see README.md, “Key-options contract”. can-sign is the sole usage today (the public/private resource split already separates sign from verify structurally); the resource carries extractable and receives future private-key usages additively.

Implementations

impl SigningKeyOptions

pub fn new() -> Self

impl SigningKeyOptions

pub fn can_sign(&self, allowed: bool)

Whether the minted key may sign. Disabled by default, and it is the sole usage, so it must be enabled for the mint to succeed (an untouched options resource fails error.not-permitted).

impl SigningKeyOptions

pub fn extractable(&self, allowed: bool)

Whether the minted key’s material may be exported (signing-key.export-key-jwk/-pkcs8 and the to-wrap-input-* functions). Disabled by default.

Trait Implementations

impl Debug for SigningKeyOptions

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.