Struct CapabilityValidator 

pub struct CapabilityValidator<'a> { /* private fields */ }

Capability validator for checking authorization.

Implementations

impl<'a> CapabilityValidator<'a>

pub fn new(store: &'a CapabilityStore) -> Self

Create a new validator with a capability store.

pub fn trust_issuer(self, issuer: PublicKey) -> Self

Add a trusted issuer (runtime public key).

pub fn check( &self, resource: &str, permission: Permission, ) -> AuthorizationResult

Check authorization for a resource and permission.

pub fn validate_token(&self, token: &CapabilityToken) -> CapabilityResult<()>

Validate a specific token.

Errors

Returns an error if the token is expired, has an invalid signature, or is not from a trusted issuer.

pub fn validate_by_id(&self, token_id: &TokenId) -> CapabilityResult<()>

Validate a token by ID.

Errors

Returns an error if the token is not found, revoked, or invalid.