Struct IamGrpcStore

weed/credential/grpc/grpc_store.go:26–35

IamGrpcStore implements CredentialStore by calling the filer's IAM gRPC service. The filer requires an admin-signed Bearer token on every RPC (see weed/server/filer_server_handlers_iam_grpc.go); SetAdminSigning must be called with the same jwt.filer_signing.key value that the filer reads from securi

// be called with the same jwt.filer_signing.key value that the filer reads
// from security.toml, or every call will fail with Unauthenticated.
type IamGrpcStore struct {
	filerAddressFunc func() pb.ServerAddress // Function to get current active filer
	grpcDialOption   grpc.DialOption
	// adminSigningKey is the HS256 secret used to mint Bearer tokens that the
	// filer's IAM gRPC service validates. Must match jwt.filer_signing.key on
	// the filer side. Empty means no token is sent (the filer will reject).
	adminSigningKey             security.SigningKey
	adminSigningExpiresAfterSec int
	mu                          sync.RWMutex // Protects filerAddressFunc, grpcDialOption, adminSigningKey, and adminSigningExpiresAfterSec
}

func (store *IamGrpcStore) GetName() credential.CredentialStoreTypeName {
	return credential.StoreTypeGrpc