IdentityRecoveryProvider

Trusted recovery integration. Implementations must protect secret records in transit and at rest, scope access to the intended user/application, and make repeated writes of the same ID idempotent. A local write must not be reported as verified cloud delivery.

Properties

Link copied to clipboard
abstract val displayName: String

Provider name suitable for identity settings.

Link copied to clipboard
abstract val id: String

Stable identifier persisted with backups; never reuse it for an incompatible integration.

Functions

Link copied to clipboard
abstract suspend fun availability(): RecoveryAvailability

Current prerequisites and protection of this integration.

Link copied to clipboard
abstract suspend fun delete(recordId: String): RecoveryReceipt

Requests deletion; returns the strongest completion evidence actually available.

Link copied to clipboard
abstract suspend fun list(): List<String>

Lists only records belonging to the provider's configured namespace and user.

Link copied to clipboard
abstract suspend fun retrieve(recordId: String): IdentityRecoveryData?

Retrieves a protected record, or returns null if it is absent.

Link copied to clipboard
abstract suspend fun store(recordId: String, record: IdentityRecoveryData): RecoveryReceipt

Stores a secret record under recordId. Existing different content must not be silently overwritten.