//! Generated by `trust-tasks-codegen` — do not edit by hand.
//!
//! Spec slug: `auth/signing-key/enroll`. Version: `0.2`.
#[allow(unused_imports)]
use serde::{Deserialize, Serialize};
/// Error types.
pub mod error {
/// Error from a `TryFrom` or `FromStr` implementation.
pub struct ConversionError(::std::borrow::Cow<'static, str>);
impl ::std::error::Error for ConversionError {}
impl ::std::fmt::Display for ConversionError {
fn fmt(&self, f: &mut ::std::fmt::Formatter<'_>) -> Result<(), ::std::fmt::Error> {
::std::fmt::Display::fmt(&self.0, f)
}
}
impl ::std::fmt::Debug for ConversionError {
fn fmt(&self, f: &mut ::std::fmt::Formatter<'_>) -> Result<(), ::std::fmt::Error> {
::std::fmt::Debug::fmt(&self.0, f)
}
}
impl From<&'static str> for ConversionError {
fn from(value: &'static str) -> Self {
Self(value.into())
}
}
impl From<String> for ConversionError {
fn from(value: String) -> Self {
Self(value.into())
}
}
}
///A human-readable name for where the key lives, chosen by the enrolling identity — e.g. `Work laptop — Chrome`. Read by that identity and by administrators deciding which key to revoke; retained with the delegation. Free text authored by the enrolling identity, untrusted, and attributed to it wherever it is rendered. Absent rather than invented when none was chosen: an invented label is indistinguishable from a chosen one to somebody deciding which key to revoke.
///
/// <details><summary>JSON schema</summary>
///
/// ```json
///{
/// "title": "DeviceLabel",
/// "description": "A human-readable name for where the key lives, chosen by the enrolling identity — e.g. `Work laptop — Chrome`. Read by that identity and by administrators deciding which key to revoke; retained with the delegation. Free text authored by the enrolling identity, untrusted, and attributed to it wherever it is rendered. Absent rather than invented when none was chosen: an invented label is indistinguishable from a chosen one to somebody deciding which key to revoke.",
/// "type": "string",
/// "maxLength": 128,
/// "minLength": 1
///}
/// ```
/// </details>
#[derive(::serde::Serialize, Clone, Debug, Eq, Hash, Ord, PartialEq, PartialOrd)]
#[serde(transparent)]
pub struct DeviceLabel(::std::string::String);
impl ::std::ops::Deref for DeviceLabel {
type Target = ::std::string::String;
fn deref(&self) -> &::std::string::String {
&self.0
}
}
impl ::std::convert::From<DeviceLabel> for ::std::string::String {
fn from(value: DeviceLabel) -> Self {
value.0
}
}
impl ::std::str::FromStr for DeviceLabel {
type Err = self::error::ConversionError;
fn from_str(value: &str) -> ::std::result::Result<Self, self::error::ConversionError> {
if value.chars().count() > 128usize {
return Err("longer than 128 characters".into());
}
if value.chars().count() < 1usize {
return Err("shorter than 1 characters".into());
}
Ok(Self(value.to_string()))
}
}
impl ::std::convert::TryFrom<&str> for DeviceLabel {
type Error = self::error::ConversionError;
fn try_from(value: &str) -> ::std::result::Result<Self, self::error::ConversionError> {
value.parse()
}
}
impl ::std::convert::TryFrom<&::std::string::String> for DeviceLabel {
type Error = self::error::ConversionError;
fn try_from(
value: &::std::string::String,
) -> ::std::result::Result<Self, self::error::ConversionError> {
value.parse()
}
}
impl ::std::convert::TryFrom<::std::string::String> for DeviceLabel {
type Error = self::error::ConversionError;
fn try_from(
value: ::std::string::String,
) -> ::std::result::Result<Self, self::error::ConversionError> {
value.parse()
}
}
impl<'de> ::serde::Deserialize<'de> for DeviceLabel {
fn deserialize<D>(deserializer: D) -> ::std::result::Result<Self, D::Error>
where
D: ::serde::Deserializer<'de>,
{
::std::string::String::deserialize(deserializer)?
.parse()
.map_err(|e: self::error::ConversionError| {
<D::Error as ::serde::de::Error>::custom(e.to_string())
})
}
}
///Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.
///
/// <details><summary>JSON schema</summary>
///
/// ```json
///{
/// "title": "Ext",
/// "description": "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.",
/// "type": "object",
/// "minProperties": 1,
/// "additionalProperties": true,
/// "propertyNames": {
/// "pattern": "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$"
/// }
///}
/// ```
/// </details>
#[derive(::serde::Deserialize, ::serde::Serialize, Clone, Debug)]
#[serde(transparent)]
pub struct Ext(pub ::std::collections::HashMap<ExtKey, ::serde_json::Value>);
impl ::std::ops::Deref for Ext {
type Target = ::std::collections::HashMap<ExtKey, ::serde_json::Value>;
fn deref(&self) -> &::std::collections::HashMap<ExtKey, ::serde_json::Value> {
&self.0
}
}
impl ::std::convert::From<Ext> for ::std::collections::HashMap<ExtKey, ::serde_json::Value> {
fn from(value: Ext) -> Self {
value.0
}
}
impl ::std::convert::From<::std::collections::HashMap<ExtKey, ::serde_json::Value>> for Ext {
fn from(value: ::std::collections::HashMap<ExtKey, ::serde_json::Value>) -> Self {
Self(value)
}
}
///`ExtKey`
///
/// <details><summary>JSON schema</summary>
///
/// ```json
///{
/// "type": "string",
/// "pattern": "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$"
///}
/// ```
/// </details>
#[derive(::serde::Serialize, Clone, Debug, Eq, Hash, Ord, PartialEq, PartialOrd)]
#[serde(transparent)]
pub struct ExtKey(::std::string::String);
impl ::std::ops::Deref for ExtKey {
type Target = ::std::string::String;
fn deref(&self) -> &::std::string::String {
&self.0
}
}
impl ::std::convert::From<ExtKey> for ::std::string::String {
fn from(value: ExtKey) -> Self {
value.0
}
}
impl ::std::str::FromStr for ExtKey {
type Err = self::error::ConversionError;
fn from_str(value: &str) -> ::std::result::Result<Self, self::error::ConversionError> {
static PATTERN: ::std::sync::LazyLock<::regress::Regex> =
::std::sync::LazyLock::new(|| {
::regress::Regex::new("^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$").unwrap()
});
if PATTERN.find(value).is_none() {
return Err("doesn't match pattern \"^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$\"".into());
}
Ok(Self(value.to_string()))
}
}
impl ::std::convert::TryFrom<&str> for ExtKey {
type Error = self::error::ConversionError;
fn try_from(value: &str) -> ::std::result::Result<Self, self::error::ConversionError> {
value.parse()
}
}
impl ::std::convert::TryFrom<&::std::string::String> for ExtKey {
type Error = self::error::ConversionError;
fn try_from(
value: &::std::string::String,
) -> ::std::result::Result<Self, self::error::ConversionError> {
value.parse()
}
}
impl ::std::convert::TryFrom<::std::string::String> for ExtKey {
type Error = self::error::ConversionError;
fn try_from(
value: ::std::string::String,
) -> ::std::result::Result<Self, self::error::ConversionError> {
value.parse()
}
}
impl<'de> ::serde::Deserialize<'de> for ExtKey {
fn deserialize<D>(deserializer: D) -> ::std::result::Result<Self, D::Error>
where
D: ::serde::Deserializer<'de>,
{
::std::string::String::deserialize(deserializer)?
.parse()
.map_err(|e: self::error::ConversionError| {
<D::Error as ::serde::de::Error>::custom(e.to_string())
})
}
}
///A freshly generated key asks to be enrolled as a signing-key delegation of an identity: documents it signs will be authorized by that identity's standing. The document is issued and proved by the key being enrolled, which is the proof that the enrolling party holds it; the identity it will act for is named in the payload and is established by the authority evidence the consumer requires — an operation-bound step-up, or the identity's own signed `authorization` — never by the key's own signature. Optionally replaces one of the identity's active keys in the same step. The outer document members (id, type, issuer, recipient, issuedAt, expiresAt, proof) are owned by the framework — SPEC §6.3.
///
/// <details><summary>JSON schema</summary>
///
/// ```json
///{
/// "$id": "https://trusttasks.org/spec/auth/signing-key/enroll/0.2",
/// "title": "Payload",
/// "description": "A freshly generated key asks to be enrolled as a signing-key delegation of an identity: documents it signs will be authorized by that identity's standing. The document is issued and proved by the key being enrolled, which is the proof that the enrolling party holds it; the identity it will act for is named in the payload and is established by the authority evidence the consumer requires — an operation-bound step-up, or the identity's own signed `authorization` — never by the key's own signature. Optionally replaces one of the identity's active keys in the same step. The outer document members (id, type, issuer, recipient, issuedAt, expiresAt, proof) are owned by the framework — SPEC §6.3.",
/// "type": "object",
/// "required": [
/// "identityDid",
/// "scope",
/// "signingKeyDid"
/// ],
/// "properties": {
/// "authorization": {
/// "description": "A complete, signed auth/signing-key/authorize/0.1 Trust Task document by which `identityDid` itself authorizes this enrolment: its payload is this payload with `authorization` removed. When present and valid it is the authority evidence of control over `identityDid`, in place of an operation-bound step-up. The consumer verifies it as a document in its own right — envelope, proof and payload against that specification's schemas — and over the members exactly as received: its proof covers every member, including ones this schema does not name, so it is deliberately an open object here rather than a typed one a binding could narrow.",
/// "type": "object"
/// },
/// "deviceLabel": {
/// "$ref": "#/definitions/DeviceLabel"
/// },
/// "expiresAt": {
/// "description": "A requested lifetime for the delegation. The consumer sets the delegation's actual expiry — no later than this, and no later than its own cap — and returns it; absent means the consumer's default lifetime. MUST be in the future when the consumer executes the task.",
/// "type": "string",
/// "format": "date-time"
/// },
/// "ext": {
/// "$ref": "#/definitions/Ext"
/// },
/// "identityDid": {
/// "description": "The identity the key will act for — the DID whose standing a document signed by the key is authorized by. Naming it is not claiming it: the consumer establishes that the enrolling party controls this identity from separate authority evidence (Authorization).",
/// "type": "string",
/// "maxLength": 2048,
/// "minLength": 5,
/// "pattern": "^did:"
/// },
/// "replaces": {
/// "description": "An active delegation of the same identity to revoke in the same step as this enrolment. For a holder at the consumer's cap on active keys, whose other keys live on devices it no longer has: one authorized enrolment swaps a key out rather than needing a working key to revoke one first. Covered by the authority evidence like every other member, so evidence for adding a key cannot be reused to remove one.",
/// "$ref": "#/definitions/SigningKeyDid"
/// },
/// "scope": {
/// "$ref": "#/definitions/SigningKeyScope"
/// },
/// "signingKeyDid": {
/// "$ref": "#/definitions/SigningKeyDid"
/// }
/// },
/// "additionalProperties": false
///}
/// ```
/// </details>
#[derive(::serde::Deserialize, ::serde::Serialize, Clone, Debug)]
#[serde(deny_unknown_fields)]
#[non_exhaustive]
pub struct Payload {
///A complete, signed auth/signing-key/authorize/0.1 Trust Task document by which `identityDid` itself authorizes this enrolment: its payload is this payload with `authorization` removed. When present and valid it is the authority evidence of control over `identityDid`, in place of an operation-bound step-up. The consumer verifies it as a document in its own right — envelope, proof and payload against that specification's schemas — and over the members exactly as received: its proof covers every member, including ones this schema does not name, so it is deliberately an open object here rather than a typed one a binding could narrow.
#[serde(default, skip_serializing_if = "::serde_json::Map::is_empty")]
pub authorization: ::serde_json::Map<::std::string::String, ::serde_json::Value>,
#[serde(
rename = "deviceLabel",
default,
skip_serializing_if = "::std::option::Option::is_none"
)]
pub device_label: ::std::option::Option<DeviceLabel>,
///A requested lifetime for the delegation. The consumer sets the delegation's actual expiry — no later than this, and no later than its own cap — and returns it; absent means the consumer's default lifetime. MUST be in the future when the consumer executes the task.
#[serde(
rename = "expiresAt",
default,
skip_serializing_if = "::std::option::Option::is_none"
)]
pub expires_at: ::std::option::Option<::chrono::DateTime<::chrono::offset::Utc>>,
#[serde(default, skip_serializing_if = "::std::option::Option::is_none")]
pub ext: ::std::option::Option<Ext>,
///The identity the key will act for — the DID whose standing a document signed by the key is authorized by. Naming it is not claiming it: the consumer establishes that the enrolling party controls this identity from separate authority evidence (Authorization).
#[serde(rename = "identityDid")]
pub identity_did: PayloadIdentityDid,
///An active delegation of the same identity to revoke in the same step as this enrolment. For a holder at the consumer's cap on active keys, whose other keys live on devices it no longer has: one authorized enrolment swaps a key out rather than needing a working key to revoke one first. Covered by the authority evidence like every other member, so evidence for adding a key cannot be reused to remove one.
#[serde(default, skip_serializing_if = "::std::option::Option::is_none")]
pub replaces: ::std::option::Option<SigningKeyDid>,
pub scope: SigningKeyScope,
#[serde(rename = "signingKeyDid")]
pub signing_key_did: SigningKeyDid,
}
impl Payload {
pub fn builder() -> builder::Payload {
Default::default()
}
}
///The identity the key will act for — the DID whose standing a document signed by the key is authorized by. Naming it is not claiming it: the consumer establishes that the enrolling party controls this identity from separate authority evidence (Authorization).
///
/// <details><summary>JSON schema</summary>
///
/// ```json
///{
/// "description": "The identity the key will act for — the DID whose standing a document signed by the key is authorized by. Naming it is not claiming it: the consumer establishes that the enrolling party controls this identity from separate authority evidence (Authorization).",
/// "type": "string",
/// "maxLength": 2048,
/// "minLength": 5,
/// "pattern": "^did:"
///}
/// ```
/// </details>
#[derive(::serde::Serialize, Clone, Debug, Eq, Hash, Ord, PartialEq, PartialOrd)]
#[serde(transparent)]
pub struct PayloadIdentityDid(::std::string::String);
impl ::std::ops::Deref for PayloadIdentityDid {
type Target = ::std::string::String;
fn deref(&self) -> &::std::string::String {
&self.0
}
}
impl ::std::convert::From<PayloadIdentityDid> for ::std::string::String {
fn from(value: PayloadIdentityDid) -> Self {
value.0
}
}
impl ::std::str::FromStr for PayloadIdentityDid {
type Err = self::error::ConversionError;
fn from_str(value: &str) -> ::std::result::Result<Self, self::error::ConversionError> {
if value.chars().count() > 2048usize {
return Err("longer than 2048 characters".into());
}
if value.chars().count() < 5usize {
return Err("shorter than 5 characters".into());
}
static PATTERN: ::std::sync::LazyLock<::regress::Regex> =
::std::sync::LazyLock::new(|| ::regress::Regex::new("^did:").unwrap());
if PATTERN.find(value).is_none() {
return Err("doesn't match pattern \"^did:\"".into());
}
Ok(Self(value.to_string()))
}
}
impl ::std::convert::TryFrom<&str> for PayloadIdentityDid {
type Error = self::error::ConversionError;
fn try_from(value: &str) -> ::std::result::Result<Self, self::error::ConversionError> {
value.parse()
}
}
impl ::std::convert::TryFrom<&::std::string::String> for PayloadIdentityDid {
type Error = self::error::ConversionError;
fn try_from(
value: &::std::string::String,
) -> ::std::result::Result<Self, self::error::ConversionError> {
value.parse()
}
}
impl ::std::convert::TryFrom<::std::string::String> for PayloadIdentityDid {
type Error = self::error::ConversionError;
fn try_from(
value: ::std::string::String,
) -> ::std::result::Result<Self, self::error::ConversionError> {
value.parse()
}
}
impl<'de> ::serde::Deserialize<'de> for PayloadIdentityDid {
fn deserialize<D>(deserializer: D) -> ::std::result::Result<Self, D::Error>
where
D: ::serde::Deserializer<'de>,
{
::std::string::String::deserialize(deserializer)?
.parse()
.map_err(|e: self::error::ConversionError| {
<D::Error as ::serde::de::Error>::custom(e.to_string())
})
}
}
///The delegation as stored. From this point a document the key signs is authorized by the identity's standing, read at execution time.
///
/// <details><summary>JSON schema</summary>
///
/// ```json
///{
/// "title": "Response",
/// "description": "The delegation as stored. From this point a document the key signs is authorized by the identity's standing, read at execution time.",
/// "type": "object",
/// "required": [
/// "signingKey"
/// ],
/// "properties": {
/// "ext": {
/// "$ref": "#/definitions/Ext"
/// },
/// "signingKey": {
/// "$ref": "#/definitions/SigningKey"
/// }
/// },
/// "additionalProperties": false,
/// "$anchor": "response"
///}
/// ```
/// </details>
#[derive(::serde::Deserialize, ::serde::Serialize, Clone, Debug)]
#[serde(deny_unknown_fields)]
#[non_exhaustive]
pub struct Response {
#[serde(default, skip_serializing_if = "::std::option::Option::is_none")]
pub ext: ::std::option::Option<Ext>,
#[serde(rename = "signingKey")]
pub signing_key: SigningKey,
}
impl Response {
pub fn builder() -> builder::Response {
Default::default()
}
}
///One signing-key delegation, as its holder sees it. A delegation confers nothing of its own: it names an identity that already holds whatever standing it holds, and a document signed by the key is authorized by that identity's standing read at execution time.
///
/// <details><summary>JSON schema</summary>
///
/// ```json
///{
/// "title": "SigningKey",
/// "description": "One signing-key delegation, as its holder sees it. A delegation confers nothing of its own: it names an identity that already holds whatever standing it holds, and a document signed by the key is authorized by that identity's standing read at execution time.",
/// "type": "object",
/// "required": [
/// "active",
/// "createdAt",
/// "expiresAt",
/// "identityDid",
/// "scope",
/// "signingKeyDid"
/// ],
/// "properties": {
/// "active": {
/// "description": "Whether the delegation authorizes documents right now: not revoked and not past `expiresAt`. Computed by the consumer with the predicate its verifier applies, so a holder does not re-implement it and disagree.",
/// "type": "boolean"
/// },
/// "createdAt": {
/// "description": "When the delegation was enrolled.",
/// "type": "string",
/// "format": "date-time"
/// },
/// "deviceLabel": {
/// "$ref": "#/definitions/DeviceLabel"
/// },
/// "expiresAt": {
/// "description": "When the delegation stops authorizing documents. Always present: the consumer sets it at enrolment and caps it at its own maximum lifetime, whatever the producer asked for, so no delegation outlives the consumer's policy.",
/// "type": "string",
/// "format": "date-time"
/// },
/// "identityDid": {
/// "description": "The identity the key acts for. Included so a holder need not infer it.",
/// "type": "string",
/// "maxLength": 2048,
/// "minLength": 5,
/// "pattern": "^did:"
/// },
/// "lastUsedAt": {
/// "description": "When the delegation last authorized a document, as far as the consumer recorded. A usability signal for choosing which key to revoke, recorded best-effort; its absence does not mean the key was never used.",
/// "type": "string",
/// "format": "date-time"
/// },
/// "revokedAt": {
/// "description": "When the delegation was revoked. A revoked delegation authorizes nothing and its key cannot be enrolled again.",
/// "type": "string",
/// "format": "date-time"
/// },
/// "scope": {
/// "$ref": "#/definitions/SigningKeyScope"
/// },
/// "signingKeyDid": {
/// "$ref": "#/definitions/SigningKeyDid"
/// }
/// },
/// "additionalProperties": false
///}
/// ```
/// </details>
#[derive(::serde::Deserialize, ::serde::Serialize, Clone, Debug)]
#[serde(deny_unknown_fields)]
#[non_exhaustive]
pub struct SigningKey {
///Whether the delegation authorizes documents right now: not revoked and not past `expiresAt`. Computed by the consumer with the predicate its verifier applies, so a holder does not re-implement it and disagree.
pub active: bool,
///When the delegation was enrolled.
#[serde(rename = "createdAt")]
pub created_at: ::chrono::DateTime<::chrono::offset::Utc>,
#[serde(
rename = "deviceLabel",
default,
skip_serializing_if = "::std::option::Option::is_none"
)]
pub device_label: ::std::option::Option<DeviceLabel>,
///When the delegation stops authorizing documents. Always present: the consumer sets it at enrolment and caps it at its own maximum lifetime, whatever the producer asked for, so no delegation outlives the consumer's policy.
#[serde(rename = "expiresAt")]
pub expires_at: ::chrono::DateTime<::chrono::offset::Utc>,
///The identity the key acts for. Included so a holder need not infer it.
#[serde(rename = "identityDid")]
pub identity_did: SigningKeyIdentityDid,
///When the delegation last authorized a document, as far as the consumer recorded. A usability signal for choosing which key to revoke, recorded best-effort; its absence does not mean the key was never used.
#[serde(
rename = "lastUsedAt",
default,
skip_serializing_if = "::std::option::Option::is_none"
)]
pub last_used_at: ::std::option::Option<::chrono::DateTime<::chrono::offset::Utc>>,
///When the delegation was revoked. A revoked delegation authorizes nothing and its key cannot be enrolled again.
#[serde(
rename = "revokedAt",
default,
skip_serializing_if = "::std::option::Option::is_none"
)]
pub revoked_at: ::std::option::Option<::chrono::DateTime<::chrono::offset::Utc>>,
pub scope: SigningKeyScope,
#[serde(rename = "signingKeyDid")]
pub signing_key_did: SigningKeyDid,
}
impl SigningKey {
pub fn builder() -> builder::SigningKey {
Default::default()
}
}
///The delegated key, as a `did:key` — an Ed25519 multikey (`z6Mk…`) derived from the public half of a keypair the holder generated for itself, typically a non-extractable browser key. `did:key` only, because its document is a function of the key and resolves with no network: a key whose DID document could be rewritten after enrolment is not the key that was enrolled.
///
/// <details><summary>JSON schema</summary>
///
/// ```json
///{
/// "title": "SigningKeyDid",
/// "description": "The delegated key, as a `did:key` — an Ed25519 multikey (`z6Mk…`) derived from the public half of a keypair the holder generated for itself, typically a non-extractable browser key. `did:key` only, because its document is a function of the key and resolves with no network: a key whose DID document could be rewritten after enrolment is not the key that was enrolled.",
/// "type": "string",
/// "maxLength": 256,
/// "minLength": 9,
/// "pattern": "^did:key:z[1-9A-HJ-NP-Za-km-z]+$"
///}
/// ```
/// </details>
#[derive(::serde::Serialize, Clone, Debug, Eq, Hash, Ord, PartialEq, PartialOrd)]
#[serde(transparent)]
pub struct SigningKeyDid(::std::string::String);
impl ::std::ops::Deref for SigningKeyDid {
type Target = ::std::string::String;
fn deref(&self) -> &::std::string::String {
&self.0
}
}
impl ::std::convert::From<SigningKeyDid> for ::std::string::String {
fn from(value: SigningKeyDid) -> Self {
value.0
}
}
impl ::std::str::FromStr for SigningKeyDid {
type Err = self::error::ConversionError;
fn from_str(value: &str) -> ::std::result::Result<Self, self::error::ConversionError> {
if value.chars().count() > 256usize {
return Err("longer than 256 characters".into());
}
if value.chars().count() < 9usize {
return Err("shorter than 9 characters".into());
}
static PATTERN: ::std::sync::LazyLock<::regress::Regex> =
::std::sync::LazyLock::new(|| {
::regress::Regex::new("^did:key:z[1-9A-HJ-NP-Za-km-z]+$").unwrap()
});
if PATTERN.find(value).is_none() {
return Err("doesn't match pattern \"^did:key:z[1-9A-HJ-NP-Za-km-z]+$\"".into());
}
Ok(Self(value.to_string()))
}
}
impl ::std::convert::TryFrom<&str> for SigningKeyDid {
type Error = self::error::ConversionError;
fn try_from(value: &str) -> ::std::result::Result<Self, self::error::ConversionError> {
value.parse()
}
}
impl ::std::convert::TryFrom<&::std::string::String> for SigningKeyDid {
type Error = self::error::ConversionError;
fn try_from(
value: &::std::string::String,
) -> ::std::result::Result<Self, self::error::ConversionError> {
value.parse()
}
}
impl ::std::convert::TryFrom<::std::string::String> for SigningKeyDid {
type Error = self::error::ConversionError;
fn try_from(
value: ::std::string::String,
) -> ::std::result::Result<Self, self::error::ConversionError> {
value.parse()
}
}
impl<'de> ::serde::Deserialize<'de> for SigningKeyDid {
fn deserialize<D>(deserializer: D) -> ::std::result::Result<Self, D::Error>
where
D: ::serde::Deserializer<'de>,
{
::std::string::String::deserialize(deserializer)?
.parse()
.map_err(|e: self::error::ConversionError| {
<D::Error as ::serde::de::Error>::custom(e.to_string())
})
}
}
///The identity the key acts for. Included so a holder need not infer it.
///
/// <details><summary>JSON schema</summary>
///
/// ```json
///{
/// "description": "The identity the key acts for. Included so a holder need not infer it.",
/// "type": "string",
/// "maxLength": 2048,
/// "minLength": 5,
/// "pattern": "^did:"
///}
/// ```
/// </details>
#[derive(::serde::Serialize, Clone, Debug, Eq, Hash, Ord, PartialEq, PartialOrd)]
#[serde(transparent)]
pub struct SigningKeyIdentityDid(::std::string::String);
impl ::std::ops::Deref for SigningKeyIdentityDid {
type Target = ::std::string::String;
fn deref(&self) -> &::std::string::String {
&self.0
}
}
impl ::std::convert::From<SigningKeyIdentityDid> for ::std::string::String {
fn from(value: SigningKeyIdentityDid) -> Self {
value.0
}
}
impl ::std::str::FromStr for SigningKeyIdentityDid {
type Err = self::error::ConversionError;
fn from_str(value: &str) -> ::std::result::Result<Self, self::error::ConversionError> {
if value.chars().count() > 2048usize {
return Err("longer than 2048 characters".into());
}
if value.chars().count() < 5usize {
return Err("shorter than 5 characters".into());
}
static PATTERN: ::std::sync::LazyLock<::regress::Regex> =
::std::sync::LazyLock::new(|| ::regress::Regex::new("^did:").unwrap());
if PATTERN.find(value).is_none() {
return Err("doesn't match pattern \"^did:\"".into());
}
Ok(Self(value.to_string()))
}
}
impl ::std::convert::TryFrom<&str> for SigningKeyIdentityDid {
type Error = self::error::ConversionError;
fn try_from(value: &str) -> ::std::result::Result<Self, self::error::ConversionError> {
value.parse()
}
}
impl ::std::convert::TryFrom<&::std::string::String> for SigningKeyIdentityDid {
type Error = self::error::ConversionError;
fn try_from(
value: &::std::string::String,
) -> ::std::result::Result<Self, self::error::ConversionError> {
value.parse()
}
}
impl ::std::convert::TryFrom<::std::string::String> for SigningKeyIdentityDid {
type Error = self::error::ConversionError;
fn try_from(
value: ::std::string::String,
) -> ::std::result::Result<Self, self::error::ConversionError> {
value.parse()
}
}
impl<'de> ::serde::Deserialize<'de> for SigningKeyIdentityDid {
fn deserialize<D>(deserializer: D) -> ::std::result::Result<Self, D::Error>
where
D: ::serde::Deserializer<'de>,
{
::std::string::String::deserialize(deserializer)?
.parse()
.map_err(|e: self::error::ConversionError| {
<D::Error as ::serde::de::Error>::custom(e.to_string())
})
}
}
///What a delegated key may be accepted for. `console`: the operations an administration console performs on the identity's behalf, authorized by the identity's own standing. Never an approver's signature on a consent or approval decision, whatever the scope: those require an `assertionMethod` key of the approver's own DID document, which a delegated key never is. A closed enumeration so a consumer cannot be asked for a scope it does not define; a later version adds values.
///
/// <details><summary>JSON schema</summary>
///
/// ```json
///{
/// "title": "SigningKeyScope",
/// "description": "What a delegated key may be accepted for. `console`: the operations an administration console performs on the identity's behalf, authorized by the identity's own standing. Never an approver's signature on a consent or approval decision, whatever the scope: those require an `assertionMethod` key of the approver's own DID document, which a delegated key never is. A closed enumeration so a consumer cannot be asked for a scope it does not define; a later version adds values.",
/// "type": "string",
/// "enum": [
/// "console"
/// ]
///}
/// ```
/// </details>
#[derive(
::serde::Deserialize,
::serde::Serialize,
Clone,
Copy,
Debug,
Eq,
Hash,
Ord,
PartialEq,
PartialOrd,
)]
#[non_exhaustive]
pub enum SigningKeyScope {
#[serde(rename = "console")]
Console,
}
impl ::std::fmt::Display for SigningKeyScope {
fn fmt(&self, f: &mut ::std::fmt::Formatter<'_>) -> ::std::fmt::Result {
match *self {
Self::Console => f.write_str("console"),
}
}
}
impl ::std::str::FromStr for SigningKeyScope {
type Err = self::error::ConversionError;
fn from_str(value: &str) -> ::std::result::Result<Self, self::error::ConversionError> {
match value {
"console" => Ok(Self::Console),
_ => Err("invalid value".into()),
}
}
}
impl ::std::convert::TryFrom<&str> for SigningKeyScope {
type Error = self::error::ConversionError;
fn try_from(value: &str) -> ::std::result::Result<Self, self::error::ConversionError> {
value.parse()
}
}
impl ::std::convert::TryFrom<&::std::string::String> for SigningKeyScope {
type Error = self::error::ConversionError;
fn try_from(
value: &::std::string::String,
) -> ::std::result::Result<Self, self::error::ConversionError> {
value.parse()
}
}
impl ::std::convert::TryFrom<::std::string::String> for SigningKeyScope {
type Error = self::error::ConversionError;
fn try_from(
value: ::std::string::String,
) -> ::std::result::Result<Self, self::error::ConversionError> {
value.parse()
}
}
/// Types for composing complex structures.
pub mod builder {
#[derive(Clone, Debug)]
pub struct Payload {
authorization: ::std::result::Result<
::serde_json::Map<::std::string::String, ::serde_json::Value>,
::std::string::String,
>,
device_label:
::std::result::Result<::std::option::Option<super::DeviceLabel>, ::std::string::String>,
expires_at: ::std::result::Result<
::std::option::Option<::chrono::DateTime<::chrono::offset::Utc>>,
::std::string::String,
>,
ext: ::std::result::Result<::std::option::Option<super::Ext>, ::std::string::String>,
identity_did: ::std::result::Result<super::PayloadIdentityDid, ::std::string::String>,
replaces: ::std::result::Result<
::std::option::Option<super::SigningKeyDid>,
::std::string::String,
>,
scope: ::std::result::Result<super::SigningKeyScope, ::std::string::String>,
signing_key_did: ::std::result::Result<super::SigningKeyDid, ::std::string::String>,
}
impl ::std::default::Default for Payload {
fn default() -> Self {
Self {
authorization: Ok(Default::default()),
device_label: Ok(Default::default()),
expires_at: Ok(Default::default()),
ext: Ok(Default::default()),
identity_did: Err("no value supplied for identity_did".to_string()),
replaces: Ok(Default::default()),
scope: Err("no value supplied for scope".to_string()),
signing_key_did: Err("no value supplied for signing_key_did".to_string()),
}
}
}
impl Payload {
pub fn authorization<T>(mut self, value: T) -> Self
where
T: ::std::convert::TryInto<
::serde_json::Map<::std::string::String, ::serde_json::Value>,
>,
T::Error: ::std::fmt::Display,
{
self.authorization = value
.try_into()
.map_err(|e| format!("error converting supplied value for authorization: {e}"));
self
}
pub fn device_label<T>(mut self, value: T) -> Self
where
T: ::std::convert::TryInto<::std::option::Option<super::DeviceLabel>>,
T::Error: ::std::fmt::Display,
{
self.device_label = value
.try_into()
.map_err(|e| format!("error converting supplied value for device_label: {e}"));
self
}
pub fn expires_at<T>(mut self, value: T) -> Self
where
T: ::std::convert::TryInto<
::std::option::Option<::chrono::DateTime<::chrono::offset::Utc>>,
>,
T::Error: ::std::fmt::Display,
{
self.expires_at = value
.try_into()
.map_err(|e| format!("error converting supplied value for expires_at: {e}"));
self
}
pub fn ext<T>(mut self, value: T) -> Self
where
T: ::std::convert::TryInto<::std::option::Option<super::Ext>>,
T::Error: ::std::fmt::Display,
{
self.ext = value
.try_into()
.map_err(|e| format!("error converting supplied value for ext: {e}"));
self
}
pub fn identity_did<T>(mut self, value: T) -> Self
where
T: ::std::convert::TryInto<super::PayloadIdentityDid>,
T::Error: ::std::fmt::Display,
{
self.identity_did = value
.try_into()
.map_err(|e| format!("error converting supplied value for identity_did: {e}"));
self
}
pub fn replaces<T>(mut self, value: T) -> Self
where
T: ::std::convert::TryInto<::std::option::Option<super::SigningKeyDid>>,
T::Error: ::std::fmt::Display,
{
self.replaces = value
.try_into()
.map_err(|e| format!("error converting supplied value for replaces: {e}"));
self
}
pub fn scope<T>(mut self, value: T) -> Self
where
T: ::std::convert::TryInto<super::SigningKeyScope>,
T::Error: ::std::fmt::Display,
{
self.scope = value
.try_into()
.map_err(|e| format!("error converting supplied value for scope: {e}"));
self
}
pub fn signing_key_did<T>(mut self, value: T) -> Self
where
T: ::std::convert::TryInto<super::SigningKeyDid>,
T::Error: ::std::fmt::Display,
{
self.signing_key_did = value
.try_into()
.map_err(|e| format!("error converting supplied value for signing_key_did: {e}"));
self
}
}
impl ::std::convert::TryFrom<Payload> for super::Payload {
type Error = super::error::ConversionError;
fn try_from(value: Payload) -> ::std::result::Result<Self, super::error::ConversionError> {
Ok(Self {
authorization: value.authorization?,
device_label: value.device_label?,
expires_at: value.expires_at?,
ext: value.ext?,
identity_did: value.identity_did?,
replaces: value.replaces?,
scope: value.scope?,
signing_key_did: value.signing_key_did?,
})
}
}
impl ::std::convert::From<super::Payload> for Payload {
fn from(value: super::Payload) -> Self {
Self {
authorization: Ok(value.authorization),
device_label: Ok(value.device_label),
expires_at: Ok(value.expires_at),
ext: Ok(value.ext),
identity_did: Ok(value.identity_did),
replaces: Ok(value.replaces),
scope: Ok(value.scope),
signing_key_did: Ok(value.signing_key_did),
}
}
}
#[derive(Clone, Debug)]
pub struct Response {
ext: ::std::result::Result<::std::option::Option<super::Ext>, ::std::string::String>,
signing_key: ::std::result::Result<super::SigningKey, ::std::string::String>,
}
impl ::std::default::Default for Response {
fn default() -> Self {
Self {
ext: Ok(Default::default()),
signing_key: Err("no value supplied for signing_key".to_string()),
}
}
}
impl Response {
pub fn ext<T>(mut self, value: T) -> Self
where
T: ::std::convert::TryInto<::std::option::Option<super::Ext>>,
T::Error: ::std::fmt::Display,
{
self.ext = value
.try_into()
.map_err(|e| format!("error converting supplied value for ext: {e}"));
self
}
pub fn signing_key<T>(mut self, value: T) -> Self
where
T: ::std::convert::TryInto<super::SigningKey>,
T::Error: ::std::fmt::Display,
{
self.signing_key = value
.try_into()
.map_err(|e| format!("error converting supplied value for signing_key: {e}"));
self
}
}
impl ::std::convert::TryFrom<Response> for super::Response {
type Error = super::error::ConversionError;
fn try_from(value: Response) -> ::std::result::Result<Self, super::error::ConversionError> {
Ok(Self {
ext: value.ext?,
signing_key: value.signing_key?,
})
}
}
impl ::std::convert::From<super::Response> for Response {
fn from(value: super::Response) -> Self {
Self {
ext: Ok(value.ext),
signing_key: Ok(value.signing_key),
}
}
}
#[derive(Clone, Debug)]
pub struct SigningKey {
active: ::std::result::Result<bool, ::std::string::String>,
created_at:
::std::result::Result<::chrono::DateTime<::chrono::offset::Utc>, ::std::string::String>,
device_label:
::std::result::Result<::std::option::Option<super::DeviceLabel>, ::std::string::String>,
expires_at:
::std::result::Result<::chrono::DateTime<::chrono::offset::Utc>, ::std::string::String>,
identity_did: ::std::result::Result<super::SigningKeyIdentityDid, ::std::string::String>,
last_used_at: ::std::result::Result<
::std::option::Option<::chrono::DateTime<::chrono::offset::Utc>>,
::std::string::String,
>,
revoked_at: ::std::result::Result<
::std::option::Option<::chrono::DateTime<::chrono::offset::Utc>>,
::std::string::String,
>,
scope: ::std::result::Result<super::SigningKeyScope, ::std::string::String>,
signing_key_did: ::std::result::Result<super::SigningKeyDid, ::std::string::String>,
}
impl ::std::default::Default for SigningKey {
fn default() -> Self {
Self {
active: Err("no value supplied for active".to_string()),
created_at: Err("no value supplied for created_at".to_string()),
device_label: Ok(Default::default()),
expires_at: Err("no value supplied for expires_at".to_string()),
identity_did: Err("no value supplied for identity_did".to_string()),
last_used_at: Ok(Default::default()),
revoked_at: Ok(Default::default()),
scope: Err("no value supplied for scope".to_string()),
signing_key_did: Err("no value supplied for signing_key_did".to_string()),
}
}
}
impl SigningKey {
pub fn active<T>(mut self, value: T) -> Self
where
T: ::std::convert::TryInto<bool>,
T::Error: ::std::fmt::Display,
{
self.active = value
.try_into()
.map_err(|e| format!("error converting supplied value for active: {e}"));
self
}
pub fn created_at<T>(mut self, value: T) -> Self
where
T: ::std::convert::TryInto<::chrono::DateTime<::chrono::offset::Utc>>,
T::Error: ::std::fmt::Display,
{
self.created_at = value
.try_into()
.map_err(|e| format!("error converting supplied value for created_at: {e}"));
self
}
pub fn device_label<T>(mut self, value: T) -> Self
where
T: ::std::convert::TryInto<::std::option::Option<super::DeviceLabel>>,
T::Error: ::std::fmt::Display,
{
self.device_label = value
.try_into()
.map_err(|e| format!("error converting supplied value for device_label: {e}"));
self
}
pub fn expires_at<T>(mut self, value: T) -> Self
where
T: ::std::convert::TryInto<::chrono::DateTime<::chrono::offset::Utc>>,
T::Error: ::std::fmt::Display,
{
self.expires_at = value
.try_into()
.map_err(|e| format!("error converting supplied value for expires_at: {e}"));
self
}
pub fn identity_did<T>(mut self, value: T) -> Self
where
T: ::std::convert::TryInto<super::SigningKeyIdentityDid>,
T::Error: ::std::fmt::Display,
{
self.identity_did = value
.try_into()
.map_err(|e| format!("error converting supplied value for identity_did: {e}"));
self
}
pub fn last_used_at<T>(mut self, value: T) -> Self
where
T: ::std::convert::TryInto<
::std::option::Option<::chrono::DateTime<::chrono::offset::Utc>>,
>,
T::Error: ::std::fmt::Display,
{
self.last_used_at = value
.try_into()
.map_err(|e| format!("error converting supplied value for last_used_at: {e}"));
self
}
pub fn revoked_at<T>(mut self, value: T) -> Self
where
T: ::std::convert::TryInto<
::std::option::Option<::chrono::DateTime<::chrono::offset::Utc>>,
>,
T::Error: ::std::fmt::Display,
{
self.revoked_at = value
.try_into()
.map_err(|e| format!("error converting supplied value for revoked_at: {e}"));
self
}
pub fn scope<T>(mut self, value: T) -> Self
where
T: ::std::convert::TryInto<super::SigningKeyScope>,
T::Error: ::std::fmt::Display,
{
self.scope = value
.try_into()
.map_err(|e| format!("error converting supplied value for scope: {e}"));
self
}
pub fn signing_key_did<T>(mut self, value: T) -> Self
where
T: ::std::convert::TryInto<super::SigningKeyDid>,
T::Error: ::std::fmt::Display,
{
self.signing_key_did = value
.try_into()
.map_err(|e| format!("error converting supplied value for signing_key_did: {e}"));
self
}
}
impl ::std::convert::TryFrom<SigningKey> for super::SigningKey {
type Error = super::error::ConversionError;
fn try_from(
value: SigningKey,
) -> ::std::result::Result<Self, super::error::ConversionError> {
Ok(Self {
active: value.active?,
created_at: value.created_at?,
device_label: value.device_label?,
expires_at: value.expires_at?,
identity_did: value.identity_did?,
last_used_at: value.last_used_at?,
revoked_at: value.revoked_at?,
scope: value.scope?,
signing_key_did: value.signing_key_did?,
})
}
}
impl ::std::convert::From<super::SigningKey> for SigningKey {
fn from(value: super::SigningKey) -> Self {
Self {
active: Ok(value.active),
created_at: Ok(value.created_at),
device_label: Ok(value.device_label),
expires_at: Ok(value.expires_at),
identity_did: Ok(value.identity_did),
last_used_at: Ok(value.last_used_at),
revoked_at: Ok(value.revoked_at),
scope: Ok(value.scope),
signing_key_did: Ok(value.signing_key_did),
}
}
}
}
impl crate::Payload for Payload {
const TYPE_URI: &'static str = "https://trusttasks.org/spec/auth/signing-key/enroll/0.2";
const IS_PROOF_REQUIRED: bool = true;
const IS_ISSUED_AT_REQUIRED: bool = true;
const IS_RECIPIENT_REQUIRED: bool = true;
const PAYLOAD_SCHEMA: Option<&'static str> = Some(
"{\n \"$defs\": {\n \"DeviceLabel\": {\n \"description\": \"A human-readable name for where the key lives, chosen by the enrolling identity — e.g. `Work laptop — Chrome`. Read by that identity and by administrators deciding which key to revoke; retained with the delegation. Free text authored by the enrolling identity, untrusted, and attributed to it wherever it is rendered. Absent rather than invented when none was chosen: an invented label is indistinguishable from a chosen one to somebody deciding which key to revoke.\",\n \"maxLength\": 128,\n \"minLength\": 1,\n \"title\": \"DeviceLabel\",\n \"type\": \"string\"\n },\n \"Ext\": {\n \"additionalProperties\": true,\n \"description\": \"Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.\",\n \"minProperties\": 1,\n \"propertyNames\": {\n \"pattern\": \"^[a-z][a-z0-9-]*(\\\\.[a-z0-9-]+)+$\"\n },\n \"title\": \"Ext\",\n \"type\": \"object\"\n },\n \"Response\": {\n \"$anchor\": \"response\",\n \"additionalProperties\": false,\n \"description\": \"The delegation as stored. From this point a document the key signs is authorized by the identity's standing, read at execution time.\",\n \"properties\": {\n \"ext\": {\n \"$ref\": \"#/$defs/Ext\"\n },\n \"signingKey\": {\n \"$ref\": \"#/$defs/SigningKey\"\n }\n },\n \"required\": [\n \"signingKey\"\n ],\n \"title\": \"Auth — Signing Key Enroll — response payload\",\n \"type\": \"object\"\n },\n \"SigningKey\": {\n \"additionalProperties\": false,\n \"description\": \"One signing-key delegation, as its holder sees it. A delegation confers nothing of its own: it names an identity that already holds whatever standing it holds, and a document signed by the key is authorized by that identity's standing read at execution time.\",\n \"properties\": {\n \"active\": {\n \"description\": \"Whether the delegation authorizes documents right now: not revoked and not past `expiresAt`. Computed by the consumer with the predicate its verifier applies, so a holder does not re-implement it and disagree.\",\n \"type\": \"boolean\"\n },\n \"createdAt\": {\n \"description\": \"When the delegation was enrolled.\",\n \"format\": \"date-time\",\n \"type\": \"string\"\n },\n \"deviceLabel\": {\n \"$ref\": \"#/$defs/DeviceLabel\"\n },\n \"expiresAt\": {\n \"description\": \"When the delegation stops authorizing documents. Always present: the consumer sets it at enrolment and caps it at its own maximum lifetime, whatever the producer asked for, so no delegation outlives the consumer's policy.\",\n \"format\": \"date-time\",\n \"type\": \"string\"\n },\n \"identityDid\": {\n \"description\": \"The identity the key acts for. Included so a holder need not infer it.\",\n \"maxLength\": 2048,\n \"minLength\": 5,\n \"pattern\": \"^did:\",\n \"type\": \"string\"\n },\n \"lastUsedAt\": {\n \"description\": \"When the delegation last authorized a document, as far as the consumer recorded. A usability signal for choosing which key to revoke, recorded best-effort; its absence does not mean the key was never used.\",\n \"format\": \"date-time\",\n \"type\": \"string\"\n },\n \"revokedAt\": {\n \"description\": \"When the delegation was revoked. A revoked delegation authorizes nothing and its key cannot be enrolled again.\",\n \"format\": \"date-time\",\n \"type\": \"string\"\n },\n \"scope\": {\n \"$ref\": \"#/$defs/SigningKeyScope\"\n },\n \"signingKeyDid\": {\n \"$ref\": \"#/$defs/SigningKeyDid\"\n }\n },\n \"required\": [\n \"signingKeyDid\",\n \"identityDid\",\n \"scope\",\n \"createdAt\",\n \"expiresAt\",\n \"active\"\n ],\n \"title\": \"SigningKey\",\n \"type\": \"object\"\n },\n \"SigningKeyDid\": {\n \"description\": \"The delegated key, as a `did:key` — an Ed25519 multikey (`z6Mk…`) derived from the public half of a keypair the holder generated for itself, typically a non-extractable browser key. `did:key` only, because its document is a function of the key and resolves with no network: a key whose DID document could be rewritten after enrolment is not the key that was enrolled.\",\n \"maxLength\": 256,\n \"minLength\": 9,\n \"pattern\": \"^did:key:z[1-9A-HJ-NP-Za-km-z]+$\",\n \"title\": \"SigningKeyDid\",\n \"type\": \"string\"\n },\n \"SigningKeyScope\": {\n \"description\": \"What a delegated key may be accepted for. `console`: the operations an administration console performs on the identity's behalf, authorized by the identity's own standing. Never an approver's signature on a consent or approval decision, whatever the scope: those require an `assertionMethod` key of the approver's own DID document, which a delegated key never is. A closed enumeration so a consumer cannot be asked for a scope it does not define; a later version adds values.\",\n \"enum\": [\n \"console\"\n ],\n \"title\": \"SigningKeyScope\",\n \"type\": \"string\"\n }\n },\n \"$id\": \"https://trusttasks.org/spec/auth/signing-key/enroll/0.2\",\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"additionalProperties\": false,\n \"description\": \"A freshly generated key asks to be enrolled as a signing-key delegation of an identity: documents it signs will be authorized by that identity's standing. The document is issued and proved by the key being enrolled, which is the proof that the enrolling party holds it; the identity it will act for is named in the payload and is established by the authority evidence the consumer requires — an operation-bound step-up, or the identity's own signed `authorization` — never by the key's own signature. Optionally replaces one of the identity's active keys in the same step. The outer document members (id, type, issuer, recipient, issuedAt, expiresAt, proof) are owned by the framework — SPEC §6.3.\",\n \"properties\": {\n \"authorization\": {\n \"description\": \"A complete, signed auth/signing-key/authorize/0.1 Trust Task document by which `identityDid` itself authorizes this enrolment: its payload is this payload with `authorization` removed. When present and valid it is the authority evidence of control over `identityDid`, in place of an operation-bound step-up. The consumer verifies it as a document in its own right — envelope, proof and payload against that specification's schemas — and over the members exactly as received: its proof covers every member, including ones this schema does not name, so it is deliberately an open object here rather than a typed one a binding could narrow.\",\n \"type\": \"object\"\n },\n \"deviceLabel\": {\n \"$ref\": \"#/$defs/DeviceLabel\"\n },\n \"expiresAt\": {\n \"description\": \"A requested lifetime for the delegation. The consumer sets the delegation's actual expiry — no later than this, and no later than its own cap — and returns it; absent means the consumer's default lifetime. MUST be in the future when the consumer executes the task.\",\n \"format\": \"date-time\",\n \"type\": \"string\"\n },\n \"ext\": {\n \"$ref\": \"#/$defs/Ext\"\n },\n \"identityDid\": {\n \"description\": \"The identity the key will act for — the DID whose standing a document signed by the key is authorized by. Naming it is not claiming it: the consumer establishes that the enrolling party controls this identity from separate authority evidence (Authorization).\",\n \"maxLength\": 2048,\n \"minLength\": 5,\n \"pattern\": \"^did:\",\n \"type\": \"string\"\n },\n \"replaces\": {\n \"$ref\": \"#/$defs/SigningKeyDid\",\n \"description\": \"An active delegation of the same identity to revoke in the same step as this enrolment. For a holder at the consumer's cap on active keys, whose other keys live on devices it no longer has: one authorized enrolment swaps a key out rather than needing a working key to revoke one first. Covered by the authority evidence like every other member, so evidence for adding a key cannot be reused to remove one.\"\n },\n \"scope\": {\n \"$ref\": \"#/$defs/SigningKeyScope\"\n },\n \"signingKeyDid\": {\n \"$ref\": \"#/$defs/SigningKeyDid\"\n }\n },\n \"required\": [\n \"signingKeyDid\",\n \"identityDid\",\n \"scope\"\n ],\n \"title\": \"Auth — Signing Key Enroll — payload\",\n \"type\": \"object\"\n}\n",
);
}
impl crate::Payload for Response {
const TYPE_URI: &'static str =
"https://trusttasks.org/spec/auth/signing-key/enroll/0.2#response";
const IS_ISSUED_AT_REQUIRED: bool = true;
const IS_RECIPIENT_REQUIRED: bool = true;
const PAYLOAD_SCHEMA: Option<&'static str> = Some(
"{\n \"$defs\": {\n \"DeviceLabel\": {\n \"description\": \"A human-readable name for where the key lives, chosen by the enrolling identity — e.g. `Work laptop — Chrome`. Read by that identity and by administrators deciding which key to revoke; retained with the delegation. Free text authored by the enrolling identity, untrusted, and attributed to it wherever it is rendered. Absent rather than invented when none was chosen: an invented label is indistinguishable from a chosen one to somebody deciding which key to revoke.\",\n \"maxLength\": 128,\n \"minLength\": 1,\n \"title\": \"DeviceLabel\",\n \"type\": \"string\"\n },\n \"Ext\": {\n \"additionalProperties\": true,\n \"description\": \"Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.\",\n \"minProperties\": 1,\n \"propertyNames\": {\n \"pattern\": \"^[a-z][a-z0-9-]*(\\\\.[a-z0-9-]+)+$\"\n },\n \"title\": \"Ext\",\n \"type\": \"object\"\n },\n \"Response\": {\n \"$anchor\": \"response\",\n \"additionalProperties\": false,\n \"description\": \"The delegation as stored. From this point a document the key signs is authorized by the identity's standing, read at execution time.\",\n \"properties\": {\n \"ext\": {\n \"$ref\": \"#/$defs/Ext\"\n },\n \"signingKey\": {\n \"$ref\": \"#/$defs/SigningKey\"\n }\n },\n \"required\": [\n \"signingKey\"\n ],\n \"title\": \"Auth — Signing Key Enroll — response payload\",\n \"type\": \"object\"\n },\n \"SigningKey\": {\n \"additionalProperties\": false,\n \"description\": \"One signing-key delegation, as its holder sees it. A delegation confers nothing of its own: it names an identity that already holds whatever standing it holds, and a document signed by the key is authorized by that identity's standing read at execution time.\",\n \"properties\": {\n \"active\": {\n \"description\": \"Whether the delegation authorizes documents right now: not revoked and not past `expiresAt`. Computed by the consumer with the predicate its verifier applies, so a holder does not re-implement it and disagree.\",\n \"type\": \"boolean\"\n },\n \"createdAt\": {\n \"description\": \"When the delegation was enrolled.\",\n \"format\": \"date-time\",\n \"type\": \"string\"\n },\n \"deviceLabel\": {\n \"$ref\": \"#/$defs/DeviceLabel\"\n },\n \"expiresAt\": {\n \"description\": \"When the delegation stops authorizing documents. Always present: the consumer sets it at enrolment and caps it at its own maximum lifetime, whatever the producer asked for, so no delegation outlives the consumer's policy.\",\n \"format\": \"date-time\",\n \"type\": \"string\"\n },\n \"identityDid\": {\n \"description\": \"The identity the key acts for. Included so a holder need not infer it.\",\n \"maxLength\": 2048,\n \"minLength\": 5,\n \"pattern\": \"^did:\",\n \"type\": \"string\"\n },\n \"lastUsedAt\": {\n \"description\": \"When the delegation last authorized a document, as far as the consumer recorded. A usability signal for choosing which key to revoke, recorded best-effort; its absence does not mean the key was never used.\",\n \"format\": \"date-time\",\n \"type\": \"string\"\n },\n \"revokedAt\": {\n \"description\": \"When the delegation was revoked. A revoked delegation authorizes nothing and its key cannot be enrolled again.\",\n \"format\": \"date-time\",\n \"type\": \"string\"\n },\n \"scope\": {\n \"$ref\": \"#/$defs/SigningKeyScope\"\n },\n \"signingKeyDid\": {\n \"$ref\": \"#/$defs/SigningKeyDid\"\n }\n },\n \"required\": [\n \"signingKeyDid\",\n \"identityDid\",\n \"scope\",\n \"createdAt\",\n \"expiresAt\",\n \"active\"\n ],\n \"title\": \"SigningKey\",\n \"type\": \"object\"\n },\n \"SigningKeyDid\": {\n \"description\": \"The delegated key, as a `did:key` — an Ed25519 multikey (`z6Mk…`) derived from the public half of a keypair the holder generated for itself, typically a non-extractable browser key. `did:key` only, because its document is a function of the key and resolves with no network: a key whose DID document could be rewritten after enrolment is not the key that was enrolled.\",\n \"maxLength\": 256,\n \"minLength\": 9,\n \"pattern\": \"^did:key:z[1-9A-HJ-NP-Za-km-z]+$\",\n \"title\": \"SigningKeyDid\",\n \"type\": \"string\"\n },\n \"SigningKeyScope\": {\n \"description\": \"What a delegated key may be accepted for. `console`: the operations an administration console performs on the identity's behalf, authorized by the identity's own standing. Never an approver's signature on a consent or approval decision, whatever the scope: those require an `assertionMethod` key of the approver's own DID document, which a delegated key never is. A closed enumeration so a consumer cannot be asked for a scope it does not define; a later version adds values.\",\n \"enum\": [\n \"console\"\n ],\n \"title\": \"SigningKeyScope\",\n \"type\": \"string\"\n }\n },\n \"$ref\": \"#/$defs/Response\",\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\"\n}\n",
);
}
impl crate::RequestPayload for Payload {
type Response = Response;
}
/// The extended error codes this specification declares (SPEC §7.3 item 9,
/// §8.5), in declaration order. Empty when it declares none.
pub const ERROR_CODES: &[crate::DeclaredErrorCode] = &[
error_codes::KEY_NOT_ISSUER,
error_codes::SELF_DELEGATION,
error_codes::KEY_HOLDS_STANDING,
error_codes::ALREADY_ENROLLED,
error_codes::KEY_REVOKED,
error_codes::EXPIRY_IN_PAST,
error_codes::TOO_MANY_KEYS,
error_codes::AUTHORIZATION_INVALID,
error_codes::REPLACE_NOT_FOUND,
];
/// One constant per extended error code this specification declares
/// (SPEC §7.3 item 9), named for its local part.
///
/// Emit these rather than a string literal: the code is read from the
/// specification, so it cannot name a code the specification never
/// declared.
pub mod error_codes {
/// `auth/signing-key/enroll:keyNotIssuer`
///
/// `signingKeyDid` is not the document's `issuer`, or the proof was not made by it. The enrolment must be signed by the key being enrolled — that signature is the proof of possession.
///
/// Declared `retryable: false`.
pub const KEY_NOT_ISSUER: crate::DeclaredErrorCode = crate::DeclaredErrorCode {
code: "auth/signing-key/enroll:keyNotIssuer",
retryable: false,
};
/// `auth/signing-key/enroll:selfDelegation`
///
/// `signingKeyDid` equals `identityDid`. A delegation names a separate key; an identity already signs as itself.
///
/// Declared `retryable: false`.
pub const SELF_DELEGATION: crate::DeclaredErrorCode = crate::DeclaredErrorCode {
code: "auth/signing-key/enroll:selfDelegation",
retryable: false,
};
/// `auth/signing-key/enroll:keyHoldsStanding`
///
/// The key already holds standing of its own at the consumer (for example an access-control entry). It is an identity rather than a key, and a delegation to it would take effect only once that standing was removed — turning a de-escalation into a hand-over.
///
/// Declared `retryable: false`.
pub const KEY_HOLDS_STANDING: crate::DeclaredErrorCode = crate::DeclaredErrorCode {
code: "auth/signing-key/enroll:keyHoldsStanding",
retryable: false,
};
/// `auth/signing-key/enroll:alreadyEnrolled`
///
/// The key is already enrolled — for this identity or another. Re-pointing a key at a different identity is a hand-over, not an edit; revoke it and generate a new key.
///
/// Declared `retryable: false`.
pub const ALREADY_ENROLLED: crate::DeclaredErrorCode = crate::DeclaredErrorCode {
code: "auth/signing-key/enroll:alreadyEnrolled",
retryable: false,
};
/// `auth/signing-key/enroll:keyRevoked`
///
/// The key was enrolled and revoked. A revoked key is burned and cannot be enrolled again; generate a new one.
///
/// Declared `retryable: false`.
pub const KEY_REVOKED: crate::DeclaredErrorCode = crate::DeclaredErrorCode {
code: "auth/signing-key/enroll:keyRevoked",
retryable: false,
};
/// `auth/signing-key/enroll:expiryInPast`
///
/// `expiresAt` is not in the future, so the delegation would authorize nothing.
///
/// Declared `retryable: false`.
pub const EXPIRY_IN_PAST: crate::DeclaredErrorCode = crate::DeclaredErrorCode {
code: "auth/signing-key/enroll:expiryInPast",
retryable: false,
};
/// `auth/signing-key/enroll:tooManyKeys`
///
/// The identity already holds as many active delegations as the consumer allows, and the enrolment names no `replaces`. Enrol again naming one of them in `replaces`, or revoke one (auth/signing-key/revoke) first. `details.maxActiveKeys` MAY state the cap. `details.activeKeys` lists the identity's active delegations so the holder can choose one to replace; a consumer MUST NOT include it unless it has accepted this enrolment's authority evidence (Conformance item 8).
///
/// Declared `retryable: false`.
pub const TOO_MANY_KEYS: crate::DeclaredErrorCode = crate::DeclaredErrorCode {
code: "auth/signing-key/enroll:tooManyKeys",
retryable: false,
};
/// `auth/signing-key/enroll:authorizationInvalid`
///
/// The `authorization` member is not a valid auth/signing-key/authorize/0.1 document for this enrolment: its proof does not verify, it is not issued by `identityDid`, it is not addressed to this consumer, it is outside its acceptance window, its `id` was already spent, or its payload differs from this payload with `authorization` removed.
///
/// Declared `retryable: false`.
pub const AUTHORIZATION_INVALID: crate::DeclaredErrorCode = crate::DeclaredErrorCode {
code: "auth/signing-key/enroll:authorizationInvalid",
retryable: false,
};
/// `auth/signing-key/enroll:replaceNotFound`
///
/// `replaces` names no active delegation of `identityDid` at this consumer. The same answer is given for a key that does not exist, is revoked or expired, or acts for a different identity, so the code reveals nothing about another identity's keys.
///
/// Declared `retryable: false`.
pub const REPLACE_NOT_FOUND: crate::DeclaredErrorCode = crate::DeclaredErrorCode {
code: "auth/signing-key/enroll:replaceNotFound",
retryable: false,
};
}
#[cfg(test)]
mod conformance {
//! Round-trip tests harvested from the spec's `spec.md`,
//! plus a `rejects_invalid_examples` test for any fixtures
//! in `payload.invalid-examples.json` (validate feature).
#[test]
fn request_example_1() {
const JSON: &str = "{\n \"id\": \"urn:uuid:5b0e3a2e-6f4c-4b8f-9d2a-1f0c2b7e4a01\",\n \"type\": \"https://trusttasks.org/spec/auth/signing-key/enroll/0.2#request\",\n \"issuer\": \"did:key:z6MkiTBz1ymuepAQ4HEHYSF1H8quG5GLVVQR3djdX3mDooWp\",\n \"recipient\": \"did:web:community.example\",\n \"issuedAt\": \"2026-09-28T10:00:00Z\",\n \"threadId\": \"urn:uuid:5b0e3a2e-6f4c-4b8f-9d2a-1f0c2b7e4aff\",\n \"payload\": {\n \"signingKeyDid\": \"did:key:z6MkiTBz1ymuepAQ4HEHYSF1H8quG5GLVVQR3djdX3mDooWp\",\n \"identityDid\": \"did:web:alice.example\",\n \"scope\": \"console\",\n \"deviceLabel\": \"Work laptop — Chrome\"\n }\n}\n";
let doc: crate::TrustTask<super::Payload> =
serde_json::from_str(JSON).expect("deserialize request example");
let rendered = serde_json::to_value(&doc).expect("re-serialize");
let expected: serde_json::Value = serde_json::from_str(JSON).expect("re-parse expected");
assert_eq!(rendered, expected, "request example failed round-trip");
}
#[test]
fn request_example_2() {
const JSON: &str = "{\n \"id\": \"urn:uuid:0c9e8d7f-6a5b-4c3d-9e2f-1a0b9c8d7e01\",\n \"type\": \"https://trusttasks.org/spec/auth/signing-key/enroll/0.2\",\n \"issuer\": \"did:key:z6MkiTBz1ymuepAQ4HEHYSF1H8quG5GLVVQR3djdX3mDooWp\",\n \"recipient\": \"did:web:community.example\",\n \"issuedAt\": \"2026-10-02T10:00:05Z\",\n \"payload\": {\n \"signingKeyDid\": \"did:key:z6MkiTBz1ymuepAQ4HEHYSF1H8quG5GLVVQR3djdX3mDooWp\",\n \"identityDid\": \"did:key:z6MkhaXgBZDvotDkL5257faiztiGiC2QtKLGpbnnEGta2doK\",\n \"scope\": \"console\",\n \"deviceLabel\": \"Home laptop — Firefox\",\n \"replaces\": \"did:key:z6MkjchhfUsD6mmvni8mCdXHw216Xrm9bQe2mBH1P5RDjVJG\",\n \"authorization\": {\n \"id\": \"urn:uuid:7f1d2c3b-4a5e-4f60-8a71-b2c3d4e5f601\",\n \"type\": \"https://trusttasks.org/spec/auth/signing-key/authorize/0.1\",\n \"issuer\": \"did:key:z6MkhaXgBZDvotDkL5257faiztiGiC2QtKLGpbnnEGta2doK\",\n \"recipient\": \"did:web:community.example\",\n \"issuedAt\": \"2026-10-02T10:00:00Z\",\n \"payload\": {\n \"signingKeyDid\": \"did:key:z6MkiTBz1ymuepAQ4HEHYSF1H8quG5GLVVQR3djdX3mDooWp\",\n \"identityDid\": \"did:key:z6MkhaXgBZDvotDkL5257faiztiGiC2QtKLGpbnnEGta2doK\",\n \"scope\": \"console\",\n \"deviceLabel\": \"Home laptop — Firefox\",\n \"replaces\": \"did:key:z6MkjchhfUsD6mmvni8mCdXHw216Xrm9bQe2mBH1P5RDjVJG\"\n },\n \"proof\": {\n \"type\": \"DataIntegrityProof\",\n \"cryptosuite\": \"eddsa-jcs-2022\",\n \"verificationMethod\": \"did:key:z6MkhaXgBZDvotDkL5257faiztiGiC2QtKLGpbnnEGta2doK#z6MkhaXgBZDvotDkL5257faiztiGiC2QtKLGpbnnEGta2doK\",\n \"created\": \"2026-10-02T09:59:00Z\",\n \"proofPurpose\": \"authentication\",\n \"proofValue\": \"z5LgJjQhKUmBMLXqvpQHYWkcVzEtfRDdKhRbHrXhY3zmQYMVFi2kUxB2ZDhNNnnCwAp6DS5nXHnS3xd8NyK8ntUCP\"\n }\n }\n }\n}\n";
let doc: crate::TrustTask<super::Payload> =
serde_json::from_str(JSON).expect("deserialize request example");
let rendered = serde_json::to_value(&doc).expect("re-serialize");
let expected: serde_json::Value = serde_json::from_str(JSON).expect("re-parse expected");
assert_eq!(rendered, expected, "request example failed round-trip");
}
#[test]
fn response_example_1() {
const JSON: &str = "{\n \"id\": \"urn:uuid:5b0e3a2e-6f4c-4b8f-9d2a-1f0c2b7e4a02\",\n \"type\": \"https://trusttasks.org/spec/auth/signing-key/enroll/0.2#response\",\n \"issuer\": \"did:web:community.example\",\n \"recipient\": \"did:key:z6MkiTBz1ymuepAQ4HEHYSF1H8quG5GLVVQR3djdX3mDooWp\",\n \"issuedAt\": \"2026-09-28T10:00:31Z\",\n \"threadId\": \"urn:uuid:5b0e3a2e-6f4c-4b8f-9d2a-1f0c2b7e4aff\",\n \"payload\": {\n \"signingKey\": {\n \"signingKeyDid\": \"did:key:z6MkiTBz1ymuepAQ4HEHYSF1H8quG5GLVVQR3djdX3mDooWp\",\n \"identityDid\": \"did:web:alice.example\",\n \"scope\": \"console\",\n \"deviceLabel\": \"Work laptop — Chrome\",\n \"createdAt\": \"2026-09-28T10:00:31Z\",\n \"expiresAt\": \"2026-10-28T10:00:31Z\",\n \"active\": true\n }\n }\n}\n";
let doc: crate::TrustTask<super::Response> =
serde_json::from_str(JSON).expect("deserialize response example");
let rendered = serde_json::to_value(&doc).expect("re-serialize");
let expected: serde_json::Value = serde_json::from_str(JSON).expect("re-parse expected");
assert_eq!(rendered, expected, "response example failed round-trip");
}
/// Each fixture in `payload.invalid-examples.json` MUST be
/// rejected by at least one of: serde deserialization, or
/// JSON-Schema validation under the `validate` feature. The
/// fixture file documents the producer-side bug class that
/// each payload exemplifies; this generated test pins it.
#[cfg(feature = "validate")]
#[test]
fn rejects_invalid_examples() {
use crate::validate::ValidatedPayload;
let fixtures: &[(&str, &str)] = &[
(
"signingKeyDid is a did:web — a delegated key must be a did:key, whose document cannot be rewritten after enrolment.",
"{\n \"identityDid\": \"did:web:alice.example\",\n \"scope\": \"console\",\n \"signingKeyDid\": \"did:web:laptop.example\"\n}",
),
(
"identityDid missing — the identity the key acts for is named, never inferred from the key's own signature.",
"{\n \"scope\": \"console\",\n \"signingKeyDid\": \"did:key:z6MkiTBz1ymuepAQ4HEHYSF1H8quG5GLVVQR3djdX3mDooWp\"\n}",
),
(
"scope missing — a delegation is always scoped, so a consumer is never left to guess what it may be accepted for.",
"{\n \"identityDid\": \"did:web:alice.example\",\n \"signingKeyDid\": \"did:key:z6MkiTBz1ymuepAQ4HEHYSF1H8quG5GLVVQR3djdX3mDooWp\"\n}",
),
(
"scope `approver` — a delegated key is never accepted as an approver's attestation, so no scope can ask for it.",
"{\n \"identityDid\": \"did:web:alice.example\",\n \"scope\": \"approver\",\n \"signingKeyDid\": \"did:key:z6MkiTBz1ymuepAQ4HEHYSF1H8quG5GLVVQR3djdX3mDooWp\"\n}",
),
(
"Empty deviceLabel — absent means no label was chosen; an empty string is an invented one.",
"{\n \"deviceLabel\": \"\",\n \"identityDid\": \"did:web:alice.example\",\n \"scope\": \"console\",\n \"signingKeyDid\": \"did:key:z6MkiTBz1ymuepAQ4HEHYSF1H8quG5GLVVQR3djdX3mDooWp\"\n}",
),
(
"Unknown member `role` — a delegation confers no role, so a request cannot ask for one.",
"{\n \"identityDid\": \"did:web:alice.example\",\n \"role\": \"admin\",\n \"scope\": \"console\",\n \"signingKeyDid\": \"did:key:z6MkiTBz1ymuepAQ4HEHYSF1H8quG5GLVVQR3djdX3mDooWp\"\n}",
),
(
"replaces is a did:web — only a delegated did:key can be swapped out.",
"{\n \"identityDid\": \"did:web:alice.example\",\n \"replaces\": \"did:web:old-laptop.example\",\n \"scope\": \"console\",\n \"signingKeyDid\": \"did:key:z6MkiTBz1ymuepAQ4HEHYSF1H8quG5GLVVQR3djdX3mDooWp\"\n}",
),
(
"authorization as a string — it is a complete Trust Task document, verified as received, not a reference to one.",
"{\n \"authorization\": \"urn:uuid:7f1d2c3b-4a5e-4f60-8a71-b2c3d4e5f601\",\n \"identityDid\": \"did:web:alice.example\",\n \"scope\": \"console\",\n \"signingKeyDid\": \"did:key:z6MkiTBz1ymuepAQ4HEHYSF1H8quG5GLVVQR3djdX3mDooWp\"\n}",
),
];
for (i, (note, raw)) in fixtures.iter().enumerate() {
let value: serde_json::Value = match serde_json::from_str(raw) {
Ok(v) => v,
Err(_) => continue,
};
let serde_ok = serde_json::from_value::<super::Payload>(value.clone()).is_ok();
let schema_ok = super::Payload::validate_value(&value).is_ok();
assert!(
!(serde_ok && schema_ok),
"invalid-example #{} ({:?}) was accepted by both serde and JSON Schema; \
the fixture's stated failure class is no longer caught:\n{}",
i + 1,
note,
raw
);
}
}
/// Each `"variant": "response"` fixture in
/// `payload.invalid-examples.json` MUST be rejected as a
/// response payload by at least one of: serde deserialization
/// into `Response`, or JSON-Schema validation against the
/// `$anchor: "response"` sub-schema (validate feature).
#[cfg(feature = "validate")]
#[test]
fn rejects_invalid_response_examples() {
use crate::validate::ValidatedPayload;
let fixtures: &[(&str, &str)] = &[
(
"Stored delegation without expiresAt — the consumer always sets and returns an expiry; an unbounded delegation is not a state this task can report.",
"{\n \"signingKey\": {\n \"active\": true,\n \"createdAt\": \"2026-09-28T10:00:31Z\",\n \"identityDid\": \"did:web:alice.example\",\n \"scope\": \"console\",\n \"signingKeyDid\": \"did:key:z6MkiTBz1ymuepAQ4HEHYSF1H8quG5GLVVQR3djdX3mDooWp\"\n }\n}",
),
(
"Stored delegation without scope.",
"{\n \"signingKey\": {\n \"active\": true,\n \"createdAt\": \"2026-09-28T10:00:31Z\",\n \"expiresAt\": \"2026-10-28T10:00:31Z\",\n \"identityDid\": \"did:web:alice.example\",\n \"signingKeyDid\": \"did:key:z6MkiTBz1ymuepAQ4HEHYSF1H8quG5GLVVQR3djdX3mDooWp\"\n }\n}",
),
(
"Response without `active` — the liveness predicate is the consumer's to compute, so a holder must never have to re-derive it.",
"{\n \"signingKey\": {\n \"createdAt\": \"2026-09-28T10:00:31Z\",\n \"expiresAt\": \"2026-10-28T10:00:31Z\",\n \"identityDid\": \"did:web:alice.example\",\n \"scope\": \"console\",\n \"signingKeyDid\": \"did:key:z6MkiTBz1ymuepAQ4HEHYSF1H8quG5GLVVQR3djdX3mDooWp\"\n }\n}",
),
(
"Response carrying the record at the top level instead of under `signingKey`.",
"{\n \"active\": true,\n \"createdAt\": \"2026-09-28T10:00:31Z\",\n \"expiresAt\": \"2026-10-28T10:00:31Z\",\n \"identityDid\": \"did:web:alice.example\",\n \"scope\": \"console\",\n \"signingKeyDid\": \"did:key:z6MkiTBz1ymuepAQ4HEHYSF1H8quG5GLVVQR3djdX3mDooWp\"\n}",
),
(
"Unknown member on the stored record — a delegation carries no role-style scopes list.",
"{\n \"signingKey\": {\n \"active\": true,\n \"createdAt\": \"2026-09-28T10:00:31Z\",\n \"expiresAt\": \"2026-10-28T10:00:31Z\",\n \"identityDid\": \"did:web:alice.example\",\n \"scope\": \"console\",\n \"scopes\": [\n \"*\"\n ],\n \"signingKeyDid\": \"did:key:z6MkiTBz1ymuepAQ4HEHYSF1H8quG5GLVVQR3djdX3mDooWp\"\n }\n}",
),
];
for (i, (note, raw)) in fixtures.iter().enumerate() {
let value: serde_json::Value = match serde_json::from_str(raw) {
Ok(v) => v,
Err(_) => continue,
};
let serde_ok = serde_json::from_value::<super::Response>(value.clone()).is_ok();
let schema_ok = super::Response::validate_value(&value).is_ok();
assert!(
!(serde_ok && schema_ok),
"invalid response example #{} ({:?}) was accepted by both serde and JSON Schema; \
the fixture's stated failure class is no longer caught:\n{}",
i + 1,
note,
raw
);
}
}
}