Versions in this module Expand all Collapse all v0 v0.1.0 Oct 12, 2026 Changes in this version + const MaxBodyBytes + var ErrUnauthenticated = errors.New("service: unauthenticated") + type Action string + const ActionBackupAck + const ActionCompromiseDEK + const ActionCompromiseKEK + const ActionDestroy + const ActionDestroyDEK + const ActionKeysList + const ActionRetireCancel + const ActionRetireComplete + const ActionRetireRequest + const ActionRewrap + const ActionRollback + const ActionRotate + const ActionShredRead + const ActionShredRequest + const ActionStatus + const ActionVerify + type Authorizer interface + Authorize func(ctx context.Context, action Action, purpose string) error + type AuthorizerFunc func(ctx context.Context, action Action, purpose string) error + func (f AuthorizerFunc) Authorize(ctx context.Context, action Action, purpose string) error + type BackupAcker interface + AckBackup func(ctx context.Context, generation uint64, at time.Time, note string) error + type ErrorBody struct + Error ErrorDetail + type ErrorDetail struct + Code string + Message string + type Options struct + Audit audit.Sink + Authorizer Authorizer + Backups map[string]BackupAcker + Clock keyforge.Clock + Reporter *status.Reporter + Rotator *rotate.Rotator + Store registry.Store + Verifier Verifier + type Service struct + func New(o Options) (*Service, error) + func (s *Service) ServeHTTP(w http.ResponseWriter, r *http.Request) + type Verifier interface + Verify func(ctx context.Context, purposes ...keyforge.Purpose) []keyforge.VerifyResult