Struct Authority 

pub struct Authority { /* private fields */ }

A tailnet-lock authority as a client tracks it: the current trusted-key State and the chain head. Built by replaying the AUM chain (or from a control-provided checkpoint); the client then uses Authority::node_key_authorized to decide whether a peer is trusted.

Implementations

impl Authority

pub fn from_state(head: AumHash, state: State) -> Authority

Construct an authority directly from a known head and trusted-key state (e.g. a control-provided checkpoint the client already trusts).

pub fn head(&self) -> AumHash

The current chain head hash (Go Authority.Head).

pub fn state(&self) -> &State

The trusted-key state.

pub fn head_matches(&self, head: &AumHash) -> bool

Whether head (e.g. decoded from TkaInfo.head) matches this authority’s head. A client that finds a mismatch must resync before trusting verifications.

pub fn node_key_authorized( &self, node_key: &[u8], signature_cbor: &[u8], ) -> Result<(), TkaError>

Verify that node_key is authorized under the current authority state by the given node-key-signature CBOR blob (Go Authority.NodeKeyAuthorized).

Fail-closed: a credential-only signature, an untrusted authorizing key, a malformed blob, or a bad signature all return Err.

Errors

Returns TkaError::Decode if signature_cbor is malformed, TkaError::CredentialCannotAuthorize for a credential-only signature, TkaError::UntrustedKey if the authorizing key is not in the current state, TkaError::NodeKeyMismatch if the signature does not cover node_key, or TkaError::BadSignature if cryptographic verification fails.

Trait Implementations

impl Clone for Authority

fn clone(&self) -> Authority

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Authority

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.