Struct VerifyRequestInput 

pub struct VerifyRequestInput<'a, H: HeaderMapView> {
    pub headers: &'a H,
    pub method: &'a str,
    pub path: &'a str,
    pub raw_query: &'a str,
    pub canonical_body: &'a str,
    pub nonce: &'a str,
    pub context_id: &'a str,
    pub max_age_seconds: u64,
    pub clock_skew_seconds: u64,
}

Input for high-level request verification.

The middleware is responsible for:

• Looking up the context in the store → providing nonce and context_id
• Reading the body and canonicalizing it (based on content type)
• Providing the raw HTTP headers via HeaderMapView

The verifier handles everything else: header extraction, validation, binding normalization, body hash comparison, and proof verification.

Fields

headers: &'a H

HTTP headers (implements HeaderMapView for case-insensitive lookup)

method: &'a str

HTTP method (e.g., “POST”, “GET”)

path: &'a str

URL path without query string (e.g., “/api/transfer”)

raw_query: &'a str

Raw query string without leading ? (e.g., “page=1&sort=name”)

canonical_body: &'a str

Canonicalized body string (caller canonicalizes based on content type)

nonce: &'a str

Server nonce (from store lookup, not from headers)

context_id: &'a str

Context ID (from store lookup or header extraction)

max_age_seconds: u64

Maximum allowed timestamp age in seconds (e.g., 300 = 5 minutes)

clock_skew_seconds: u64

Clock skew tolerance in seconds (e.g., 60)