Struct Response 

pub struct Response<'a> { /* private fields */ }

Complete DER response and its original optional token. Private fields keep the status/token association immutable; reading establishes no trust.

use std::sync::Arc;
use structured_asn1::{Parser, memory::{Memory, MemoryAccount}};
use structured_cms::timestamp::{Response, response::Status};
let memory = Memory::new(Arc::new(MemoryAccount::new(4096, 65536)));
let parser = Parser::der(memory);
let mut reader = parser.read(&[0x30, 5, 0x30, 3, 2, 1, 2], 400).unwrap();
let response = Response::read(&mut reader).unwrap();
assert_eq!(response.status().status(), Status::Rejection);
assert!(response.token().is_none()); // no signature evidence on failure

Implementations

impl<'doc> Response<'doc>

pub fn check<'a, P, S: Source, PE, RE>( &'a self, provider: &'a P, query: &Reader<'a>, context: &CheckContext<'a, '_>, covered: &mut S, recognizes: impl FnMut(&TokenExtension<'_>, &Execution<'_>) -> Result<bool, RE>, ) -> Result<CheckedResponse<'a>, CheckError<S::Error, PE, RE>>

where P: for<'scope> SignatureProvider<'scope, Error = PE>, 'doc: 'a,

Check a response against its actual live parsed request. context.requested is required; its absence is a caller-context InvalidLocation refusal, not a malformed response or a downgrade to archival checking. Negative status responses start no provider, profile, recognizer or covered-content work. All token, request, source, callback and resource causes remain unchanged.

pub fn check_with_profile<'a, P, S: Source, PE, RE, FE>( &'a self, provider: &'a P, query: &Reader<'a>, context: &CheckContext<'a, '_>, covered: &mut S, recognizes: impl FnMut(&TokenExtension<'_>, &Execution<'_>) -> Result<bool, RE>, profile: impl for<'view, 'scope> FnOnce(ProfileInput<'view, 'doc, 'a, 'scope>) -> Result<(), ProfileFailure<FE>>, ) -> Result<CheckedResponse<'a>, ProfileCheckError<S::Error, PE, RE, FE>>

where P: for<'scope> SignatureProvider<'scope, Error = PE>, 'doc: 'a,

Same shared token kernel with its original pre-crypto profile hook. No response status, nonce or certificate hint bypasses the selected profile.

impl<'a> Response<'a>

pub fn read(parent: &mut Reader<'a>) -> Result<Self>

Read exactly one complete response; refuse any trailing source bytes.

pub fn read_element(parent: &Reader<'a>, element: &Element<'a>) -> Result<Self>

Read one original embedded response. The response’s own DER contract applies even in a BER carrier, without a replacement parser or account.

pub fn status(&self) -> &StatusInfo<'a>

Original unauthenticated status metadata.

pub fn token(&self) -> Option<&Token<'a>>

Original token, only present for granted/grantedWithMods.

pub fn element(&self) -> &Element<'a>

Original whole response; no re-encoded token or physical-offset reset.

pub fn token_reader_in<'op>( &self, query: &Reader<'op>, ) -> Result<Option<Reader<'op>>>

where 'a: 'op,

Reopen the actual token at its original nested depth and current/source ceilings. Absence is paid metadata, not an unlimited lookup fast path.

Trait Implementations

impl<'a> Debug for Response<'a>

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.