Struct SignatureHeader 

#[non_exhaustive]
pub struct SignatureHeader {
    pub alg: String,
    pub kid: Option<String>,
    pub jku: Option<String>,
}

The decoded JWS protected header of an AgentCardSignature.

Spec §8.4.3 step 2 requires a verifying client to “retrieve the public key using the kid and jku (or from a trusted key store)”. That step is the caller’s — see verify_agent_card for why — but the caller cannot perform it without reading those two fields, and they live base64url-encoded inside AgentCardSignature::protected. signature_header decodes them so callers do not have to hand-roll base64 and JSON parsing to obey a MUST.

Fields (Non-exhaustive)

Non-exhaustive structs could have additional fields added in future. Therefore, non-exhaustive structs cannot be constructed in external crates using the traditional Struct { .. } syntax; cannot be matched against without a wildcard ..; and struct update syntax will not work.

alg: String

The JWS algorithm (alg). Only ES256 is verifiable by this module.

kid: Option<String>

The key identifier (kid), when the signer supplied one.

jku: Option<String>

The JWK Set URL (jku) to retrieve the signing key from, when present.

Spec §8.4.3 says public keys SHOULD be retrieved over secure channels; treat a non-HTTPS jku, or one pointing outside the agent’s own origin, as untrusted.

Trait Implementations

impl Clone for SignatureHeader

fn clone(&self) -> SignatureHeader

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SignatureHeader

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Eq for SignatureHeader

impl PartialEq for SignatureHeader

fn eq(&self, other: &SignatureHeader) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for SignatureHeader