Enum NonceCheck 

pub enum NonceCheck {
    Fresh,
    Stale,
    Invalid,
}

The result of checking a NONCE attribute against the issuer that (claims to have) minted it (SPEC.md §14.4). Exhaustive: adding a variant is a breaking change.

Variants

Fresh

The nonce’s HMAC tag matches its own bucket and source, and that bucket is the current one or the one before it (0-120s old, depending on issue-time-within-bucket).

Stale

The tag matches, but the bucket is older than “current or previous” — this issuer minted it, for this source, but too long ago.

Invalid

The tag does not match (wrong secret, wrong source, forged, or corrupt), OR the value does not even base64url-decode to NONCE_LEN bytes. A forged nonce is always Invalid, never Stale — the tag is checked BEFORE the bucket age (SPEC.md §14.4: “so a forged nonce is never reported as merely stale”).

Trait Implementations

impl Clone for NonceCheck

fn clone(&self) -> NonceCheck

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for NonceCheck

impl Debug for NonceCheck

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for NonceCheck

impl PartialEq for NonceCheck

fn eq(&self, other: &NonceCheck) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for NonceCheck