Enum KeylessReason 

#[non_exhaustive]
pub enum KeylessReason {
    IssuerNotAccepted,
    TokenInvalid,
    AudienceMismatch,
    ConfirmationMismatch,
    TokenReplayed,
    IdentityNotAuthorized,
    PopInvalid,
    AttestationMissing,
    AttestationForeign,
    AttestationNotFound,
    AttestationMismatch,
    AttestationWithdrawn,
    OutsideAttestationWindow,
    KeylessIdentityMismatch,
    AttestationInvalid,
    UntrustedAttester,
    Unplaceable,
    InvalidSignature,
    Revoked,
    ControllerUnreachable,
}

Why a keyless step refused: the registry details.reason tokens (§5.2, §6.3, §7) and the consumer verification results (§8.1).

Variants (Non-exhaustive)

Non-exhaustive enums could have additional variants added in future. Therefore, when matching against variants of non-exhaustive enums, an extra wildcard arm must be added to account for any future variants.

IssuerNotAccepted

§5.2 step 2: the token’s issuer (or SPIFFE trust domain) is not accepted by the registry.

TokenInvalid

§5.2 step 3: the token fails verification.

AudienceMismatch

§5.2 step 3: the token’s aud lacks the registry’s DID.

ConfirmationMismatch

§5.2 step 3: cnf.jkt is not the presented key’s thumbprint.

TokenReplayed

§5.2 step 3: the token was already used.

IdentityNotAuthorized

§5.2 step 6, §6.3 step 7: the controller does not list the identity.

PopInvalid

§5.2 step 4: the proof of possession does not verify.

AttestationMissing

§6.3 step 1: a keyless key id with no key_attestation.

AttestationForeign

§6.3 step 2: the attestation is on another registry.

AttestationNotFound

§6.3 step 3: no attestation at key_attestation.ctx_id.

AttestationMismatch

§6.3 steps 3–4, §8.1 step 3: the attestation’s bytes or bindings differ.

AttestationWithdrawn

§6.3 step 5, §8.1 step 7: the attestation was retracted.

OutsideAttestationWindow

§6.3 step 6, §8.1 step 5: the placing time is outside the window.

KeylessIdentityMismatch

§7: the successor’s identity may not supersede the predecessor.

AttestationInvalid

§8.1 step 1: the attestation does not verify or breaks §5.3.

UntrustedAttester

§8.1 step 2: the consumer does not accept the attesting registry.

Unplaceable

§8.1 step 4: no receipt by the attester places the signature.

InvalidSignature

§8.1 step 6: the signature does not verify under the attested key.

Revoked

§8.1 step 8: a revocation of the attested key applies.

ControllerUnreachable

§8.1 step 9: the controller’s DID document could not be fetched.

Implementations

impl KeylessReason

pub const ALL: [KeylessReason; 20]

Every reason, in declaration order.

pub fn as_str(self) -> &'static str

The token as written on the wire and in reports.

pub fn parse(token: &str) -> Option<KeylessReason>

Parse a token.

pub fn is_registry_token(self) -> bool

True for the tokens registries/error-codes.md lists as registry details.reason values (the rest are consumer results, §13.3).

pub fn tag(self, message: impl Display) -> String

message with this reason’s prefix.

pub fn error(self, message: impl Display) -> AcdpError

The consumer-side error for this reason (§8.1, §8.2): the existing variant whose meaning fits, with the reason prefix. controller_unreachable is the one transient refusal.

pub fn of(error: &AcdpError) -> Option<KeylessReason>

The keyless reason an error carries, if any. A AcdpError::KeyRevoked reads as Self::Revoked: keyless verification refuses a revoked key with that typed error.

Trait Implementations

impl Clone for KeylessReason

fn clone(&self) -> KeylessReason

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for KeylessReason

impl Debug for KeylessReason

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for KeylessReason

fn deserialize<__D>( __deserializer: __D, ) -> Result<KeylessReason, <__D as Deserializer<'de>>::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Display for KeylessReason

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Eq for KeylessReason

impl Hash for KeylessReason

fn hash<__H>(&self, state: &mut __H)

where __H: Hasher,

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl PartialEq for KeylessReason

fn eq(&self, other: &KeylessReason) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for KeylessReason

fn serialize<__S>( &self, __serializer: __S, ) -> Result<<__S as Serializer>::Ok, <__S as Serializer>::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for KeylessReason