Enum AccountAuthenticator 

pub enum AccountAuthenticator {
    Ed25519 {
        public_key: Ed25519PublicKey,
        signature: Ed25519Signature,
    },
    MultiEd25519 {
        public_key: Vec<u8>,
        signature: Vec<u8>,
    },
    SingleKey {
        public_key: Vec<u8>,
        signature: Vec<u8>,
    },
    MultiKey {
        public_key: Vec<u8>,
        signature: Vec<u8>,
    },
    NoAccountAuthenticator,
    Keyless {
        public_key: Vec<u8>,
        signature: Vec<u8>,
    },
}

An authenticator for a single account (not the full transaction).

The on-chain BCS schema for the SingleKey, MultiKey, and Keyless variants wraps the public key and signature in typed Aptos-core structs (SingleKeyAuthenticator, MultiKeyAuthenticator, KeylessSignature) whose BCS encodings already begin with their own enum/struct tags. Internally we still hold pre-encoded Vec<u8> (callers produce those via the AnyPublicKey/AnySignature/MultiKeyPublicKey/MultiKeySignature helpers). To match the on-chain wire format exactly we hand-roll the Serialize implementation so those variants emit the inner bytes inline – without the extra ULEB128 length prefix that the derive impl would add to a Vec<u8> field.

Variants

Ed25519

Ed25519 authentication (variant 0).

Fields

public_key: Ed25519PublicKey

The public key (32 bytes).

signature: Ed25519Signature

The signature (64 bytes).

MultiEd25519

Multi-Ed25519 authentication (variant 1).

Fields

public_key: Vec<u8>

The public key.

signature: Vec<u8>

The signature.

SingleKey

Single-key authentication (ed25519, secp256k1 and secp256r1) (variant 2).

Fields

public_key: Vec<u8>

The public key (BCS-serialized AnyPublicKey).

signature: Vec<u8>

The signature (BCS-serialized AnySignature).

MultiKey

Multi-key authentication (mixed signature types) (variant 3).

Fields

public_key: Vec<u8>

The public key (BCS-serialized MultiKeyPublicKey).

signature: Vec<u8>

The signature (BCS-serialized MultiKeySignature).

NoAccountAuthenticator

No account authenticator used for simulation only (variant 4).

Keyless

Available on crate feature keyless only.

Keyless (OIDC-based) authentication (variant 5). Uses ephemeral keys and ZK proofs for authentication.

Fields

public_key: Vec<u8>

The ephemeral public key bytes.

signature: Vec<u8>

The BCS-serialized KeylessSignature containing ephemeral signature and ZK proof.

Implementations

impl AccountAuthenticator

pub fn ed25519(public_key: Vec<u8>, signature: Vec<u8>) -> Self

Creates an Ed25519 account authenticator.

pub fn single_key(public_key: Vec<u8>, signature: Vec<u8>) -> Self

Creates a single-key account authenticator.

pub fn multi_key(public_key: Vec<u8>, signature: Vec<u8>) -> Self

Creates a multi-key account authenticator.

pub fn no_account_authenticator() -> Self

Creates a no account authenticator.

pub fn for_simulate_endpoint(self) -> Self

Rewrites this authenticator for the Aptos /transactions/simulate endpoint.

The fullnode rejects requests whose authenticators contain a cryptographically valid signature (HTTP 400: “Simulated transactions must not have a valid signature”). The SDK applies this transform automatically before simulate HTTP calls so callers do not need to hand-replace authenticators.

• SingleKey and Keyless become AccountAuthenticator::NoAccountAuthenticator, matching the common workaround for unified-key accounts.
• Ed25519, MultiEd25519, and MultiKey keep their public key material but replace signature bytes with zeros (preserving MultiEd25519 / MultiKey vector lengths).

pub fn keyless(public_key: Vec<u8>, signature: Vec<u8>) -> Self

Available on crate feature keyless only.

Creates a keyless account authenticator.

Arguments

• public_key - The ephemeral public key bytes
• signature - The BCS-serialized KeylessSignature

pub fn verify(&self, message: &[u8]) -> AptosResult<()>

Verifies the authenticator against a signing message.

Errors

Returns an error if the authenticator does not verify for the message.

pub fn derived_address(&self) -> AptosResult<AccountAddress>

Returns the account address implied by this authenticator’s public key material.

Errors

Returns an error if the contained public key bytes cannot be parsed.

Trait Implementations

impl Clone for AccountAuthenticator

fn clone(&self) -> AccountAuthenticator

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AccountAuthenticator

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for AccountAuthenticator

fn deserialize<D: Deserializer<'de>>(deserializer: D) -> Result<Self, D::Error>

Deserialize this value from the given Serde deserializer.

impl From<Ed25519Authenticator> for AccountAuthenticator

fn from(auth: Ed25519Authenticator) -> Self

Converts to this type from the input type.

impl PartialEq for AccountAuthenticator

fn eq(&self, other: &AccountAuthenticator) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for AccountAuthenticator

fn serialize<S: Serializer>(&self, serializer: S) -> Result<S::Ok, S::Error>

Serialize this value into the given Serde serializer.

impl Eq for AccountAuthenticator

impl StructuralPartialEq for AccountAuthenticator