Struct ChallengeResponse 

pub struct ChallengeResponse { /* private fields */ }

A signed response to an authentication challenge.

Contains a COSE_Sign1 structure with the signature over the challenge bytes, proving possession of the private key corresponding to the claimed identity.

Examples

Create and verify a challenge response:

use ap_proxy_protocol::{Challenge, IdentityKeyPair};

// Client signs challenge
let keypair = IdentityKeyPair::generate();
let challenge = Challenge::new();
let response = challenge.sign(&keypair);

// Server verifies response
let identity = keypair.identity();
assert!(response.verify(&challenge, &identity));

Implementations

impl ChallengeResponse

pub fn verify(&self, challenge: &Challenge, identity: &Identity) -> bool

Verify this response against the original challenge and claimed identity.

Returns true if the signature is valid and was created by the private key corresponding to the provided identity. Returns false if:

• The signature is malformed
• The signature verification fails
• The identity public key is invalid
• The algorithm in the signature doesn’t match the identity

Authentication Process

The server uses this method to authenticate clients:

1. Receive Identity and ChallengeResponse from client
2. Call response.verify(&original_challenge, &claimed_identity)
3. If true, the client possesses the private key (authenticated)
4. If false, reject the authentication attempt

Examples

use ap_proxy_protocol::{Challenge, IdentityKeyPair};

let keypair = IdentityKeyPair::generate();
let challenge = Challenge::new();
let response = challenge.sign(&keypair);

// Valid signature
assert!(response.verify(&challenge, &keypair.identity()));

// Invalid signature (different challenge)
let other_challenge = Challenge::new();
assert!(!response.verify(&other_challenge, &keypair.identity()));

// Invalid signature (different identity)
let other_keypair = IdentityKeyPair::generate();
assert!(!response.verify(&challenge, &other_keypair.identity()));

Trait Implementations

impl Clone for ChallengeResponse

fn clone(&self) -> ChallengeResponse

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ChallengeResponse

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for ChallengeResponse

fn deserialize<__D>( __deserializer: __D, ) -> Result<ChallengeResponse, <__D as Deserializer<'de>>::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for ChallengeResponse

fn serialize<__S>( &self, __serializer: __S, ) -> Result<<__S as Serializer>::Ok, <__S as Serializer>::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.