Struct UserDelegation 

#[non_exhaustive]
pub struct UserDelegation {
    pub bound_to: PrincipalId,
    pub camp_id: String,
    pub issued_at: i64,
    pub expires_at: i64,
    pub user_signing_key: [u8; 32],
    pub signature: [u8; 64],
}

A short-lived authorization signed by a user U that lets cheers bind a camp principal to U at provision time.

The signed payload is the canonical byte serialization of every field except signature itself (see signing_payload). Construct via UserDelegation::new — the constructor enforces the invariants the authority would otherwise reject downstream. Deserialization runs those same checks via [RawUserDelegation], so a wire payload can’t bypass them.

Fields (Non-exhaustive)

Non-exhaustive structs could have additional fields added in future. Therefore, non-exhaustive structs cannot be constructed in external crates using the traditional Struct { .. } syntax; cannot be matched against without a wildcard ..; and struct update syntax will not work.

bound_to: PrincipalId

The user authorising the delegation. MUST have kind = User.

camp_id: String

Camp identifier (the bare half of the to-be-minted camp:<id>). Non-empty.

issued_at: i64

Unix-second timestamp the user signed at.

expires_at: i64

Unix-second timestamp the delegation stops being acceptable.

user_signing_key: [u8; 32]

Ed25519 public key the signature must verify under (32 bytes). Wire form: base64url-no-pad string.

signature: [u8; 64]

Ed25519 signature over signing_payload (64 bytes). Wire form: base64url-no-pad string.

Implementations

impl UserDelegation

pub fn new( bound_to: PrincipalId, camp_id: impl Into<String>, issued_at: i64, expires_at: i64, user_signing_key: [u8; 32], signature: [u8; 64], ) -> Result<Self, DelegationError>

Construct + validate. Rejects a non-user bound_to, an empty camp_id, or an expires_at not strictly after issued_at.

pub fn is_expired_at(&self, now: i64) -> bool

true iff expires_at <= now — mirrors McpClaims::is_expired_at.

pub fn signing_payload(&self) -> Vec<u8>

Canonical bytes the user signed.

Stable across runs: a fixed-ordered struct of every field except the signature itself, serialized through serde_json (which preserves struct field order). Producers (the yah-side W122 signing flow) and verifiers (cheers-server) MUST agree on this format byte-for-byte; any change is a wire-contract change.

Trait Implementations

impl Clone for UserDelegation

fn clone(&self) -> UserDelegation

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for UserDelegation

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for UserDelegation

fn deserialize<D: Deserializer<'de>>(de: D) -> Result<Self, D::Error>

Deserialize this value from the given Serde deserializer.

impl Eq for UserDelegation

impl PartialEq for UserDelegation

fn eq(&self, other: &UserDelegation) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for UserDelegation

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for UserDelegation