feat: add ManagedKey aggregate and related components

agent_api_http/Cargo.toml

@@ -16,6 +16,7 @@ agent_verification = { path = "../agent_verification" }
 
 anyhow.workspace = true
 askama = "0.14"
+async-trait.workspace = true
 axum.workspace = true
 axum-auth = "0.8"
 axum-macros = "0.5"
@@ -28,6 +29,8 @@ hyper = { version = "1.2" }
 identity_core.workspace = true
 identity_credential.workspace = true
 identity_did.workspace = true
+identity_iota.workspace = true
+identity_storage.workspace = true
 metrics = "0.24"
 metrics-exporter-prometheus = { version = "0.17", default-features = false }
 oauth_tsl.workspace = true

agent_api_http/openapi.yaml

@@ -1429,6 +1429,111 @@ paths:
         "201":
           description: Linked VP service created successfully
 
+  /v0/keys/generate-new-key:
+    post:
+      tags:
+        - Identity
+      summary: Generate a new key
+      description: Generates a new cryptographic key and stores it in the key management system.
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              type: object
+              required:
+                - alias
+              properties:
+                alias:
+                  type: string
+                  description: A human-readable name for this key.
+                  example: "my-signing-key-01"
+                signatureAlgorithm:
+                  type: string
+                  description: The signature algorithm to use for this key. Defaults to Ed25519 if not specified.
+                  example: "Ed25519"
+
+  /v0/keys/remove-key:
+    post:
+      tags:
+        - Identity
+      summary: Remove an existing key
+      description: Removes an existing cryptographic key from the key management system.
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              type: object
+              required:
+                - keyId
+              properties:
+                keyId:
+                  type: string
+                  description: The ID of the key to remove.
+                  example: "a81bc81b-d7a7-4e5d-abff-90865d1e13b1"
+
+  /v0/keys/rename-key-alias:
+    post:
+      tags:
+        - Identity
+      summary: Rename the alias of a key
+      description: Renames the human-readable alias of an existing cryptographic key in the key management system.
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              type: object
+              required:
+                - keyId
+                - newAlias
+              properties:
+                keyId:
+                  type: string
+                  description: The ID of the key to rename.
+                  example: "a81bc81b-d7a7-4e5d-abff-90865d1e13b1"
+                newAlias:
+                  type: string
+                  description: The new alias for the key.
+                  example: "my-new-key-alias"
+
+  /v0/keys/set-signing-key:
+    post:
+      tags:
+        - Identity
+      summary: Set a key as the active signing key
+      description: Designates a specific managed key to be used for signing operations.
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              type: object
+              required:
+                - keyId
+              properties:
+                keyId:
+                  type: string
+                  description: The ID of the key to set as the signing key.
+                  example: "a81bc81b-abcd-4e5d-abff-90865d1e13b1"
+
+  /v0/keys/list-all:
+    get:
+      tags:
+        - Identity
+      summary: List all managed keys
+      description: Retrieves a list of all cryptographic keys managed by the key management system.
+      responses:
+        "200":
+          description: Keys retrieved successfully
+          content:
+            application/json:
+              schema:
+                type: array
+                items:
+                  type: object
+
   /auth/token:
     post:
       summary: Standard OAuth 2.0 endpoint for fetching a token