Struct StorageService 

pub struct StorageService { /* private fields */ }

Authenticated Storage Service handle.

Wraps a PushService plus the short-lived basic-auth credentials and the account StorageServiceKey, so callers get decrypted protobufs straight out and never touch the wire crypto themselves.

Implementations

impl StorageService

pub async fn new( service: PushService, storage_key: StorageServiceKey, ) -> Result<Self, ServiceError>

Authenticate against the storage service.

Fetches a fresh basic-auth token (GET /v1/storage/auth); the token is good for ~24h server-side but cheap enough to re-fetch per sync.

pub async fn manifest(&self) -> Result<ManifestRecord, StorageServiceError>

Fetch and decrypt the latest manifest.

pub async fn manifest_if_changed( &self, version: u64, ) -> Result<Option<ManifestRecord>, StorageServiceError>

Fetch and decrypt the manifest only if the server’s version differs from version. Ok(None) means the server matched (HTTP 204).

pub async fn read_items( &self, keys: Vec<Vec<u8>>, record_ikm: Option<&[u8]>, ) -> Result<Vec<StorageRecord>, StorageServiceError>

Fetch and decrypt storage items by key.

keys are Identifier.raw blobs from ManifestRecord::identifiers; record_ikm is ManifestRecord::record_ikm (empty on legacy accounts, in which case the per-item key is derived from the storage key directly). Items the server doesn’t return are simply absent from the result.

pub fn decrypt_manifest( storage_key: &StorageServiceKey, manifest: &StorageManifest, ) -> Result<ManifestRecord, StorageServiceError>

Decrypt a StorageManifest into a ManifestRecord.

pub fn encrypt_manifest( storage_key: &StorageServiceKey, record: &ManifestRecord, ) -> StorageManifest

Encrypt a ManifestRecord into a StorageManifest ready to PUT.

pub fn decrypt_item( storage_key: &StorageServiceKey, item: &StorageItem, record_ikm: Option<&[u8]>, ) -> Result<StorageRecord, StorageServiceError>

Decrypt a StorageItem into a StorageRecord.

pub fn encrypt_item( storage_key: &StorageServiceKey, raw_id: Vec<u8>, record: &StorageRecord, record_ikm: Option<&[u8]>, ) -> StorageItem

Encrypt a StorageRecord into a StorageItem ready to PUT.

raw_id is the item’s identifier; record_ikm should match what’s in the manifest this item will be referenced from.