identity_credential 1.1.1

An implementation of the Verifiable Credentials standard.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71

// Copyright 2020-2023 IOTA Stiftung
// SPDX-License-Identifier: Apache-2.0

use identity_core::common::Timestamp;
use identity_document::verifiable::JwsVerificationOptions;
use serde::Deserialize;
use serde::Serialize;

/// Criteria for validating a Key Binding JWT (KB-JWT).
#[derive(Debug, Default, Clone, Serialize, Deserialize)]
#[non_exhaustive]
#[serde(rename_all = "camelCase")]
pub struct KeyBindingJWTValidationOptions {
  /// Validates the nonce value of the KB-JWT claims.
  #[serde(skip_serializing_if = "Option::is_none")]
  pub nonce: Option<String>,
  /// Validates the `aud` properties in the KB-JWT claims.
  #[serde(skip_serializing_if = "Option::is_none")]
  pub aud: Option<String>,
  /// Options which affect the verification of the signature on the KB-JWT.
  pub jws_options: JwsVerificationOptions,
  /// Declares that the KB-JWT is considered invalid if the `iat` value in the claims is
  /// earlier than this timestamp.
  #[serde(skip_serializing_if = "Option::is_none")]
  pub earliest_issuance_date: Option<Timestamp>,
  /// Declares that the KB-JWT is considered invalid if the `iat` value in the claims is
  /// later than this timestamp.
  /// Uses the current timestamp during validation if not set.
  #[serde(skip_serializing_if = "Option::is_none")]
  pub latest_issuance_date: Option<Timestamp>,
}

impl KeyBindingJWTValidationOptions {
  /// Constructor that sets all options to their defaults.
  pub fn new() -> Self {
    Self::default()
  }

  /// Validates the nonce value of the KB-JWT claims.
  pub fn nonce(mut self, nonce: impl Into<String>) -> Self {
    self.nonce = Some(nonce.into());
    self
  }

  /// Set options which affect the verification of the signature on the KB-JWT.
  pub fn jws_verifier_options(mut self, options: JwsVerificationOptions) -> Self {
    self.jws_options = options;
    self
  }

  /// Sets the `aud` property for verification.
  pub fn aud(mut self, aud: impl Into<String>) -> Self {
    self.aud = Some(aud.into());
    self
  }

  /// Declares that the KB-JWT is considered invalid if the `iat` value in the claims is
  /// earlier than this timestamp.
  pub fn earliest_issuance_date(mut self, earliest_issuance_date: Timestamp) -> Self {
    self.earliest_issuance_date = Some(earliest_issuance_date);
    self
  }

  /// Declares that the KB-JWT is considered invalid if the `iat` value in the claims is
  /// later than this timestamp.
  /// Uses the current timestamp during validation if not set.
  pub fn latest_issuance_date(mut self, latest_issuance_date: Timestamp) -> Self {
    self.latest_issuance_date = Some(latest_issuance_date);
    self
  }
}