Struct SharedTokenScheme 

pub struct SharedTokenScheme {
    pub header: &'static str,
}

A shared-token scheme: the header carries the secret itself, in the clear, and a value equal to the secret is what proves the delivery — there is no signature over the body, so body is ignored entirely. The comparison is the verifier’s constant-time one (the same helper the HMAC path uses); a missing, empty or non-UTF-8 token refuses. Nothing here is bound to time, so a captured token replays: claim each delivery’s event id through the Inbox ledger.

Fields

header: &'static str

The header carrying the token.

Trait Implementations

impl Clone for SharedTokenScheme

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for SharedTokenScheme

impl Debug for SharedTokenScheme

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for SharedTokenScheme

impl PartialEq for SharedTokenScheme

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl SignatureScheme for SharedTokenScheme

fn extract(&self, headers: &HeaderMap, body: &[u8]) -> Option<SignedDelivery>

Reads one delivery’s signature material out of the request headers and the raw body bytes. None on any input the scheme cannot fully read; an empty candidate list counts as unreadable.

fn expected_signature(&self, key: &[u8], signed_payload: &[u8]) -> Vec<u8>

The signature bytes a matching delivery must carry, given the derived key and the bytes the scheme signed. The default is HMAC(self.digest(), key, signed_payload); a shared-token scheme overrides this to return the key’s own bytes, because for it the header is the secret and there is nothing to compute.

fn secret_key<'a>(&self, secret: &'a str) -> Option<Cow<'a, [u8]>>

The key bytes the HMAC runs over: the trimmed secret’s own bytes, unless the scheme’s providers hand out encoded secrets (Svix’s base64 whsec_…), which decode here. None refuses.

fn digest(&self) -> Digest

The digest the scheme’s HMAC runs on. SHA-256 unless a provider signs with SHA-1 (Vercel today). Ignored by a shared-token scheme, which hashes nothing.

impl StructuralPartialEq for SharedTokenScheme