spire-api

Rust SPIRE API Library

This library provides support for SPIRE specific APIs in Rust.

Features

• Delegated Identity API support: Facilitates authorized workloads to obtain SVIDs (SPIFFE Verifiable Identity Documents) and bundles on behalf of others that cannot be directly attested by SPIRE Agent. This feature enhances identity support for complex scenarios, including those where workloads cannot be directly recognized by SPIRE.

Installation

Include this line in your Cargo.toml:

[dependencies]
spire-api = "0.3.2"

Usage

Fetch a delegated X.509 and JWT SVIDs providing a set of selectors:

use spire_api::DelegatedIdentityClient;

let client = DelegatedIdentityClient::default().await?;

let x509_svid = client.fetch_x509_svid(DelegateAttestationRequest::Selectors(vec![
  selectors::Selector::Unix(selectors::Unix::Uid(1000)),
])).await?;

For more documentation, refer to the spire-api crate documentation.

Delegated Identity API

For more information about the SPIRE Delegated Identity API, refer to the official documentation.

License

This library is licensed under the Apache License. See the LICENSE.md file for details.