authority: use an empty meter if none supplied

authority/authority.go

@@ -145,6 +145,10 @@ func New(cfg *config.Config, opts ...Option) (*Authority, error) {
 		}
 	}
 
+	if a.meter == nil {
+		a.meter = noopMeter{}
+	}
+
 	return a, nil
 }
 
@@ -185,6 +189,10 @@ func NewEmbedded(opts ...Option) (*Authority, error) {
 		}
 	}
 
+	if a.meter == nil {
+		a.meter = noopMeter{}
+	}
+
 	return a, nil
 }
 

authority/meter.go

@@ -14,3 +14,14 @@ type Meter interface {
 	// SSHRenewedf is called whenever a SSH certificate is renewed.
 	SSHRenewed(provisioner string)
 }
+
+// noopMeter implements a noop [Meter].
+type noopMeter struct{}
+
+func (noopMeter) X509Signed(string) {}
+
+func (noopMeter) X509Renewed(string) {}
+
+func (noopMeter) SSHSigned(string) {}
+
+func (noopMeter) SSHRenewed(string) {}

authority/ssh.go

@@ -300,9 +300,7 @@ func (a *Authority) SignSSH(_ context.Context, key ssh.PublicKey, opts provision
 		return nil, errs.Wrap(http.StatusInternalServerError, err, "authority.SignSSH: error storing certificate in db")
 	}
 
-	if h := a.meter; h != nil {
-		h.SSHSigned(prov.GetName())
-	}
+	a.meter.SSHSigned(prov.GetName())
 
 	return cert, nil
 }

authority/tls.go

@@ -289,9 +289,7 @@ func (a *Authority) Sign(csr *x509.CertificateRequest, signOpts provisioner.Sign
 		}
 	}
 
-	if h := a.meter; h != nil {
-		h.X509Signed(prov.GetName())
-	}
+	a.meter.X509Signed(prov.GetName())
 
 	return fullchain, nil
 }
@@ -451,9 +449,7 @@ func (a *Authority) RenewContext(ctx context.Context, oldCert *x509.Certificate,
 		}
 	}
 
-	if h := a.meter; h != nil {
-		h.X509Renewed(prov.GetName())
-	}
+	a.meter.X509Renewed(prov.GetName())
 
 	return fullchain, nil
 }