Constructor DataEncryptionKeyRingSettings

Namespace

MailFathom.Infrastructure.DataEncryption

Assembly

MailFathom.Infrastructure.dll

DataEncryptionKeyRingSettings(string, IReadOnlyList<DataEncryptionKeyReference>)

The deployment's key ring as the encryption adapter reads it, mapped from bound configuration.

public DataEncryptionKeyRingSettings(string ActiveKeyId, IReadOnlyList<DataEncryptionKeyReference> Keys)

Parameters

ActiveKeyId string

The identifier of the key new values are sealed under.

Keys IReadOnlyList<DataEncryptionKeyReference>

Every key a stored value may still name, including the active one.

Remarks

This is the infrastructure-facing shape of the DataEncryption configuration root, so the adapter depends on a settings record rather than on the host's bindable options — the same split IDatabaseConnectionSettingsValidator already uses for the database credential. A reloaded snapshot reaches the ring by producing a new instance of this record, so a key an operator adds is available to the next operation without a restart.