Struct Verifier 

pub struct Verifier { /* private fields */ }

Dependency-injected verifier for attestation and chain verification.

Uses Arc<dyn CryptoProvider> and Arc<dyn ClockProvider> for lifetime-free sharing across async tasks and web server handler state.

Usage:

use std::sync::Arc;
use auths_verifier::{Verifier, SystemClock};
use auths_crypto::RingCryptoProvider;

let verifier = Verifier::native();
let result = verifier.verify_with_keys(&att, &pk).await;

Implementations

impl Verifier

pub fn new( provider: Arc<dyn CryptoProvider>, clock: Arc<dyn ClockProvider>, ) -> Self

Create a Verifier with the given crypto provider and clock.

Args:

• provider: Ed25519 crypto backend.
• clock: Clock provider for expiry checks.

pub fn native() -> Self

Create a Verifier using the native Ring crypto provider and system clock.

pub async fn verify_with_keys( &self, att: &Attestation, issuer_pk_bytes: &[u8], ) -> Result<VerifiedAttestation, AttestationError>

Verify an attestation’s signatures against the issuer’s public key.

Args:

• att: The attestation to verify.
• issuer_pk_bytes: Raw Ed25519 public key of the issuer.

pub async fn verify_with_capability( &self, att: &Attestation, required: &Capability, issuer_pk_bytes: &[u8], ) -> Result<VerifiedAttestation, AttestationError>

Verify an attestation and check that it grants a required capability.

Args:

• att: The attestation to verify.
• required: The capability that must be present.
• issuer_pk_bytes: Raw Ed25519 public key of the issuer.

pub async fn verify_at_time( &self, att: &Attestation, issuer_pk_bytes: &[u8], at: DateTime<Utc>, ) -> Result<VerifiedAttestation, AttestationError>

Verify an attestation against a specific point in time (skips clock-skew check).

Args:

• att: The attestation to verify.
• issuer_pk_bytes: Raw Ed25519 public key of the issuer.
• at: The reference timestamp for expiry evaluation.

pub async fn verify_chain( &self, attestations: &[Attestation], root_pk: &[u8], ) -> Result<VerificationReport, AttestationError>

Verify an ordered attestation chain starting from a known root public key.

Args:

• attestations: Ordered attestation chain (root first).
• root_pk: Raw Ed25519 public key of the root identity.

pub async fn verify_chain_with_capability( &self, attestations: &[Attestation], required: &Capability, root_pk: &[u8], ) -> Result<VerificationReport, AttestationError>

Verify a chain and assert that all attestations share a required capability.

Args:

• attestations: Ordered attestation chain (root first).
• required: The capability that must appear in every link.
• root_pk: Raw Ed25519 public key of the root identity.

pub async fn verify_chain_with_witnesses( &self, attestations: &[Attestation], root_pk: &[u8], witness_config: &WitnessVerifyConfig<'_>, ) -> Result<VerificationReport, AttestationError>

Verify a chain and additionally validate witness receipts against a quorum threshold.

Args:

• attestations: Ordered attestation chain (root first).
• root_pk: Raw Ed25519 public key of the root identity.
• witness_config: Witness receipts and quorum threshold to validate.

pub async fn verify_device_authorization( &self, identity_did: &str, device_did: &DeviceDID, attestations: &[Attestation], identity_pk: &[u8], ) -> Result<VerificationReport, AttestationError>

Verify that a specific device is authorized under a given identity.

Args:

• identity_did: The DID of the authorizing identity.
• device_did: The device DID to check authorization for.
• attestations: Pool of attestations to search.
• identity_pk: Raw Ed25519 public key of the identity.

Trait Implementations

impl Clone for Verifier

fn clone(&self) -> Verifier

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.