aitp 0.2.0

Agent Identity & Trust Protocol — facade crate re-exporting the protocol crates
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73

//! Agent Identity & Trust Protocol (AITP) — facade crate.
//!
//! This crate re-exports the AITP protocol crates so most users can depend
//! on a single crate:
//!
//! ```toml
//! [dependencies]
//! aitp = "0.1"
//! ```
//!
//! Consumers that need only TCT verification (e.g. integrating into an
//! existing service) should depend on `aitp-tct` and `aitp-crypto`
//! directly to avoid pulling in the handshake state machine and HTTP
//! transport.
//!
//! # Example: issue and verify a TCT
//!
//! ```
//! use aitp::core::Timestamp;
//! use aitp::prelude::*;
//! use aitp::tct::{verify_tct, TctBuilder, TctVerifyContext};
//!
//! # fn main() -> Result<(), Box<dyn std::error::Error>> {
//! let alice = AitpSigningKey::from_seed(&[0x11; 32]);
//! let bob = AitpSigningKey::from_seed(&[0x22; 32]);
//! let now = Timestamp(1_700_000_000);
//!
//! let tct = TctBuilder::new(&alice)
//!     .subject(bob.aid().clone())
//!     .audience(bob.aid().clone())  // v0.1: audience == subject
//!     .grants(["demo.echo"])
//!     .ttl_secs(3600)
//!     .subject_pubkey(bob.verifying_key())
//!     .issued_at(now)
//!     .build()?;
//!
//! let alice_pubkey = AitpVerifyingKey::from_aid(alice.aid())?;
//! let ctx = TctVerifyContext {
//!     expected_audience: bob.aid(),
//!     issuer_pubkey: &alice_pubkey,
//!     now,
//!     issuer_manifest_expires_at: None,
//!     revocation_check: None,
//! };
//! verify_tct(&tct, &ctx)?;
//! # Ok(())
//! # }
//! ```

#![forbid(unsafe_code)]

pub use aitp_core as core;
pub use aitp_crypto as crypto;
pub use aitp_delegation as delegation;
pub use aitp_handshake as handshake;
pub use aitp_manifest as manifest;
#[cfg(feature = "experimental-session-bundle")]
pub use aitp_session_bundle as session_bundle;
pub use aitp_tct as tct;

#[cfg(feature = "http-client")]
pub use aitp_transport_http as transport;

#[cfg(feature = "http-client")]
pub mod facade;

/// Convenience re-exports of the most common types.
pub mod prelude {
    pub use crate::core::{Aid, AitpEnvelope, Timestamp};
    pub use crate::crypto::{AitpSigningKey, AitpVerifyingKey};
    pub use crate::manifest::Manifest;
    pub use crate::tct::{Tct, TctBuilder};
}