Struct RecordSignatureRequest 

pub struct RecordSignatureRequest {
    pub repo_path: Option<RepositoryRef>,
    pub artifact: Option<ArtifactRef>,
    pub biscuit_envelope: Vec<u8>,
    pub signer_public_key: Vec<u8>,
    pub client_operation_id: String,
}

Records one Biscuit-signed artifact attestation.

biscuit_envelope is a serialized Biscuit whose AUTHORITY block is signed by signer_public_key and contains exactly one value for each fact below:

artifact_signature_version(“1”) artifact_repository(“”) artifact_kind(“<ArtifactRef.kind>”) artifact_digest(“”) artifact_signer_key(“”) artifact_signed_at()

Weft verifies those facts trusting authority; facts appended in an attenuation block cannot override them. The signed repository fact must exactly match the authenticated repository selected by repo_path, and the signed kind and digest must exactly match artifact. This binding prevents replay onto another repository, artifact kind, or artifact digest.

The server binds signer_public_key to the authenticated subject’s active key registry entry. Signer identity and human/agent classification are never accepted from a client-supplied flag. Storage is unique by (repository, artifact, signer), so retrying cannot inflate the chain.

Fields

repo_path: Option<RepositoryRef>

artifact: Option<ArtifactRef>

biscuit_envelope: Vec<u8>

signer_public_key: Vec<u8>

client_operation_id: String

Trait Implementations

impl Clone for RecordSignatureRequest

fn clone(&self) -> RecordSignatureRequest

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for RecordSignatureRequest

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for RecordSignatureRequest

fn default() -> Self

Returns the “default value” for a type.

impl Eq for RecordSignatureRequest

impl Hash for RecordSignatureRequest

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl Message for RecordSignatureRequest

fn encoded_len(&self) -> usize

Returns the encoded length of the message without a length delimiter.

fn clear(&mut self)

Clears the message, resetting all fields to their default.

fn encode(&self, buf: &mut impl BufMut) -> Result<(), EncodeError>

where Self: Sized,

Encodes the message to a buffer.

fn encode_to_vec(&self) -> Vec<u8>

where Self: Sized,

Encodes the message to a newly allocated buffer.

fn encode_length_delimited( &self, buf: &mut impl BufMut, ) -> Result<(), EncodeError>

where Self: Sized,

Encodes the message with a length-delimiter to a buffer.

fn encode_length_delimited_to_vec(&self) -> Vec<u8>

where Self: Sized,

Encodes the message with a length-delimiter to a newly allocated buffer.

fn decode(buf: impl Buf) -> Result<Self, DecodeError>

where Self: Default,

Decodes an instance of the message from a buffer.

fn decode_length_delimited(buf: impl Buf) -> Result<Self, DecodeError>

where Self: Default,

Decodes a length-delimited instance of the message from the buffer.

fn merge(&mut self, buf: impl Buf) -> Result<(), DecodeError>

where Self: Sized,

Decodes an instance of the message from a buffer, and merges it into self.

fn merge_length_delimited(&mut self, buf: impl Buf) -> Result<(), DecodeError>

where Self: Sized,

Decodes a length-delimited instance of the message from buffer, and merges it into self.

impl PartialEq for RecordSignatureRequest

fn eq(&self, other: &RecordSignatureRequest) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for RecordSignatureRequest