Struct StandingVerifier 

pub struct StandingVerifier<Rd> { /* private fields */ }

The edge facade for standing node bindings: trust, revocation replica and supersession ledger for one issuer. Like EdgeVerifier it holds no minter.

Implementations

impl<Rd> StandingVerifier<Rd>

where Rd: RevocationReader,

pub fn new(trust: IssuerTrust, revoked: Rd) -> StandingVerifier<Rd>

A verifier with an empty ledger; import a persisted one through ledger after a restart.

pub fn trust(&self) -> &IssuerTrust

pub fn revocations(&self) -> &Rd

pub fn ledger(&self) -> &BindingLedger

pub async fn adopt(&self, token: &str) -> Result<StandingBinding, VerifyError>

Verify a binding that arrived without a peer — by gossip, or the edge’s own persisted one at boot — and record its seq, so it supersedes older bindings for its device. Checks the signature only: whether the binding is revoked or names this peer does not change that the issuer minted it.

pub async fn verify_standing_at( &self, token: &str, presented: &PeerKey, now: i64, ) -> Result<VerifiedStanding, StandingError>

Admit token as a standing binding for the peer that proved presented in its handshake.

In order, cheapest and most local first: signature (recording the binding’s seq in the ledger), peer key, supersession, then the revocation reads (jti, then device) — the only I/O. now decides VerifiedStanding::lease and nothing else: there is no expiry.

Trait Implementations

impl<Rd> Debug for StandingVerifier<Rd>

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.