Class DataEncryptionKeyRingSettings

Namespace

MailFathom.Infrastructure.DataEncryption

Assembly

MailFathom.Infrastructure.dll

The deployment's key ring as the encryption adapter reads it, mapped from bound configuration.

public sealed record DataEncryptionKeyRingSettings : IEquatable<DataEncryptionKeyRingSettings>

Inheritance

object

DataEncryptionKeyRingSettings

Implements

IEquatable<DataEncryptionKeyRingSettings>

Inherited Members

object.Equals(object)

object.Equals(object, object)

object.GetHashCode()

object.GetType()

object.ReferenceEquals(object, object)

object.ToString()

Remarks

This is the infrastructure-facing shape of the DataEncryption configuration root, so the adapter depends on a settings record rather than on the host's bindable options — the same split IDatabaseConnectionSettingsValidator already uses for the database credential. A reloaded snapshot reaches the ring by producing a new instance of this record, so a key an operator adds is available to the next operation without a restart.

Constructors

DataEncryptionKeyRingSettings(string, IReadOnlyList<DataEncryptionKeyReference>)

The deployment's key ring as the encryption adapter reads it, mapped from bound configuration.

Properties

ActiveKeyId

The identifier of the key new values are sealed under.

Keys

Every key a stored value may still name, including the active one.