Struct KeyAttestation 

pub struct KeyAttestation {
    pub attestation_version: String,
    pub controller: String,
    pub identity: WorkloadIdentity,
    pub org_wide: bool,
    pub key_id: String,
    pub algorithm: String,
    pub public_key_jwk: Jwk,
    pub key_fingerprint: String,
    pub not_before: DateTime<Utc>,
    pub not_after: DateTime<Utc>,
    pub token_hash: String,
}

The acdp-key-attestation/1 metadata of an acdp:key-attestation body (§5.3). Closed at every level; build it with KeyAttestation::from_metadata or KeyAttestation::from_body, which also check the rules the schema cannot express.

Fields

attestation_version: String

Always ATTESTATION_VERSION.

controller: String

The controller’s did:web DID.

identity: WorkloadIdentity

The verified workload identity.

org_wide: bool

Copied from the controller’s DID-document entry.

key_id: String

<controller>#acdp-kl-<hex> (§6.1).

algorithm: String

ed25519 or ecdsa-p256.

public_key_jwk: Jwk

The attested key.

key_fingerprint: String

The attested key’s RFC-ACDP-0010 §6 fingerprint.

not_before: DateTime<Utc>

Start of the window, inclusive.

not_after: DateTime<Utc>

End of the window, exclusive.

token_hash: String

sha256: + hex SHA-256 of the token.

Implementations

impl KeyAttestation

pub fn from_metadata(metadata: &Value) -> Result<Self, AcdpError>

Parse the metadata object and check §5.3: the closed schema, the fingerprint of public_key_jwk, the key_id derived from it, the algorithm matching the key type, and the window bound.

pub fn from_body(body: &Body) -> Result<Self, AcdpError>

Check an attestation body against §5.3 and return its metadata: the body shape (type, public, version 1, no lineage or links), agent_id equal to did:web: plus the ctx_id authority, the schema_uri, acdp_version ≥ 0.5.0 and the metadata rules.

The body’s own hash, signature and receipt are the caller’s to verify (§8.1 step 1).

pub fn binds(&self, agent_id: &AgentDid, signature: &Signature) -> bool

§6.2 / §8.1 step 3: agent_id, signature.key_id and signature.algorithm match this attestation.

pub fn window_contains(&self, t: DateTime<Utc>) -> bool

True when t lies in [not_before, not_after).

pub fn signer(&self) -> KeylessSigner

The signer this attestation makes of a body (§7).

Trait Implementations

impl Clone for KeyAttestation

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for KeyAttestation

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for KeyAttestation

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for KeyAttestation

impl PartialEq for KeyAttestation

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for KeyAttestation

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for KeyAttestation