Struct AuthApi 

pub struct AuthApi;

AuthApi

Owns delegated-token helpers and root-signed role-attestation helpers. Owned by the API layer and called by generated endpoint wrappers.

Implementations

impl AuthApi

pub fn establish_application_session( request: ApplicationSessionRequest, ) -> Result<ApplicationSessionCommandResponse, Error>

Establish one caller-bound scoped session from a current delegated proof.

pub fn clear_application_session() -> Result<ApplicationSessionCommandResponse, Error>

Remove only the current caller’s retained session and keep replay tombstones.

pub fn application_session_status() -> Result<ApplicationSessionStatus, Error>

Return the current caller’s read-only application-session classification.

pub fn application_session_audit( page: PageRequest, ) -> Result<ApplicationSessionAuditResponse, Error>

Return one root-authorized bounded audit page of retained application sessions.

impl AuthApi

pub fn prepare_component_role_attestation_root( request: RoleAttestationRequest, member: &ManagedCanisterBinding, ) -> Result<RoleAttestationPrepareResponse, Error>

Prepare a root-certified role attestation from the local root update path.

pub fn get_role_attestation_root( request: RoleAttestationGetRequest, ) -> Result<SignedRoleAttestation, Error>

Retrieve a prepared role attestation with its root canister-signature proof.

pub async fn verify_role_attestation( attestation: &SignedRoleAttestation, min_accepted_epoch: u64, ) -> Result<(), Error>

Verify a role attestation locally from its embedded root proof.

pub async fn verify_local_subnet_role_attestation( attestation: &SignedRoleAttestation, min_accepted_epoch: u64, ) -> Result<(), Error>

Verify a role attestation that explicitly binds the caller to this live Subnet.

impl AuthApi

pub fn upsert_root_issuer_policy_root( request: RootIssuerPolicyUpsertRequest, ) -> Result<RootIssuerPolicyResponse, Error>

Upsert root issuer policy from the local root controller path.

pub fn upsert_root_issuer_renewal_template_root( request: RootIssuerRenewalTemplateUpsertRequest, ) -> Result<RootIssuerRenewalTemplateResponse, Error>

Upsert root-managed renewal template from the local root controller path.

pub fn root_issuer_renewal_status_root( request: RootIssuerRenewalStatusRequest, ) -> Result<RootIssuerRenewalStatusResponse, Error>

Report root-managed renewal template/state for one issuer.

pub async fn get_or_create_chain_key_delegation_proof_root() -> Result<RootDelegationProofBatchProof, Error>

Return or create a chain-key root delegation proof for the registered issuer caller.

pub async fn provision_chain_key_delegation_proof_for_issuer_root( issuer_pid: Principal, ) -> Result<(), Error>

Create or reuse and install a chain-key delegation proof for one issuer.

Root applications may call this after installing or reinstalling an issuer so delegated-token issuance is ready before the first login.

impl AuthApi

pub async fn prepare_delegated_token( request: DelegatedTokenPrepareRequest, ) -> Result<DelegatedTokenPrepareResponse, Error>

Prepare a delegated token from the issuer-local active delegation proof.

pub fn get_delegated_token( request: DelegatedTokenGetRequest, ) -> Result<DelegatedToken, Error>

Retrieve a prepared delegated token with its issuer canister-signature proof.

pub fn install_active_delegation_proof( request: InstallActiveDelegationProofRequest, ) -> Result<InstallActiveDelegationProofResponse, Error>

Install validated root-certified delegation material for issuer-local token issuance.

pub fn active_delegation_proof_status() -> Result<ActiveDelegationProofStatusResponse, Error>

Report non-secret issuer-local active proof lifecycle status for operators.