Struct ContentHashMismatch 

pub struct ContentHashMismatch {
    pub recomputed: String,
    pub claimed: String,
}

Error raised when a ReceiptSigningHandle is consumed against a receipt body whose claimed content_hash does not match the hash the signer recomputed over the bound canonical content.

This is the WYSIWYS (“what you see is what you sign”) fail-closed gate: the signer refuses to bind a signature to a body whose content_hash field was not derived from the exact content the handle was built over. It closes the render-A / sign-B class of attacks where a caller renders content A to a human but submits a body claiming the hash of content B.

Fields

recomputed: String

The hash recomputed by the signer over the handle’s canonical content.

claimed: String

The content_hash the caller embedded in the receipt body.

Implementations

impl ContentHashMismatch

pub fn message(&self) -> String

Render a stable, non-secret-bearing description for error surfaces.

Trait Implementations

impl Clone for ContentHashMismatch

fn clone(&self) -> ContentHashMismatch

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ContentHashMismatch

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Eq for ContentHashMismatch

impl PartialEq for ContentHashMismatch

fn eq(&self, other: &ContentHashMismatch) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for ContentHashMismatch