Struct UnlockedCredentials 

pub struct UnlockedCredentials { /* private fields */ }

Unlocked keys and their Account locator, owned by the caller.

No Debug/Serialize/Clone implementation is provided. Returned signer clones and handles have independent lifetimes; dropping this owner is not revocation or a promise to erase parser, allocator or cryptographic-library copies.

Implementations

impl UnlockedCredentials

pub fn account_id(&self) -> &ID

The authenticated Account locator. It grants no access by itself.

pub fn key_ids(&self) -> Vec<PublicKey>

Public IDs of exactly the explicitly supplied keys, in supplied order.

pub fn signer(&self, key_id: &PublicKey) -> Result<PrivateKey>

Obtain an independently owned signer for an explicit key selection. A missing key is an error, never fallback to a personal/default key.

pub fn add_key(&mut self, key: PrivateKey) -> Result<()>

Add an explicitly supplied key locally. Neither references nor Auth changes call this method automatically. Persist with Self::seal.

pub fn seal(&self) -> Result<CredentialBundle>

Encrypt the current explicit bundle using the unlocked wrapping key and a fresh nonce. Does not persist or change the password.

pub fn rewrap(&self, password: &str) -> Result<CredentialBundle>

Rewrap with a new password and salt. Does not revoke or rotate signing keys, invalidate existing handles or render old copies unrecoverable. The caller must explicitly persist the result before discarding it.