Lockspire.Domain.SigningKey (lockspire v1.0.0)

Copy Markdown

Durable signing-key lifecycle state for JWKS publication and rotation.

Summary

Types

key_type()

@type key_type() :: :RSA | :EC | :OKP

status()

@type status() :: :upcoming | :active | :retiring | :retired

t()

@type t() :: %Lockspire.Domain.SigningKey{
  activated_at: DateTime.t() | nil,
  alg: String.t(),
  id: integer() | nil,
  inserted_at: DateTime.t() | nil,
  kid: String.t(),
  kty: key_type(),
  metadata: map(),
  private_jwk_encrypted: binary() | nil,
  public_jwk: map(),
  published_at: DateTime.t() | nil,
  retired_at: DateTime.t() | nil,
  retiring_at: DateTime.t() | nil,
  status: status(),
  tenant_id: String.t() | nil,
  updated_at: DateTime.t() | nil,
  use: use_type()
}

use_type()

@type use_type() :: :sig | :enc