Struct PairingToken 

pub struct PairingToken {
    pub controller_did: String,
    pub endpoint: String,
    pub short_code: String,
    pub session_id: String,
    pub ephemeral_pubkey: String,
    pub expires_at: DateTime<Utc>,
    pub capabilities: Vec<Capability>,
    pub kem_slot: Option<KemSlot>,
    pub daemon_spki_sha256: Option<String>,
}

A pairing token for initiating cross-device identity linking.

Fields

controller_did: String

endpoint: String

short_code: String

session_id: String

ephemeral_pubkey: String

expires_at: DateTime<Utc>

capabilities: Vec<Capability>

kem_slot: Option<KemSlot>

Optional hybrid-KEM slot. None on classical builds and classical sessions; Some(KemSlot::MlKem768 { .. }) when the initiator is running a pq-hybrid-enabled build. Parsers on default builds accept but do not act on a populated slot (they cannot — they have no ML-KEM code). An active hybrid peer MUST NOT silently downgrade when this field is Some.

daemon_spki_sha256: Option<String>

Optional SPKI SHA-256 fingerprint (base64url, 32 bytes decoded) of the daemon’s TLS certificate. Populated when the daemon is built with the tls feature; the phone pins against this value on connect so no CA is required. None means the daemon is serving plaintext.

Implementations

impl PairingToken

pub fn generate( now: DateTime<Utc>, controller_did: String, endpoint: String, capabilities: Vec<Capability>, ) -> Result<PairingSession, ProtocolError>

Generate a new pairing token with a 5-minute expiry.

pub fn generate_with_expiry( now: DateTime<Utc>, controller_did: String, endpoint: String, capabilities: Vec<Capability>, expiry: TimeDelta, ) -> Result<PairingSession, ProtocolError>

Generate a new pairing token with custom expiry.

pub fn is_expired(&self, now: DateTime<Utc>) -> bool

pub fn to_uri(&self) -> String

Convert to an auths:// URI for QR code or deep linking.

pub fn from_uri(uri: &str) -> Result<PairingToken, ProtocolError>

Parse a pairing token from an auths:// URI.

pub fn ephemeral_pubkey_bytes(&self) -> Result<Vec<u8>, ProtocolError>

Decode the ephemeral P-256 ECDH public key from the token’s base64url field.

Trait Implementations

impl Clone for PairingToken

fn clone(&self) -> PairingToken

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for PairingToken

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for PairingToken

fn deserialize<__D>( __deserializer: __D, ) -> Result<PairingToken, <__D as Deserializer<'de>>::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for PairingToken

fn serialize<__S>( &self, __serializer: __S, ) -> Result<<__S as Serializer>::Ok, <__S as Serializer>::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.