Struct SubmitRecoveryProofRequest 

pub struct SubmitRecoveryProofRequest {
    pub recovery_attempt_id: String,
    pub client_operation_id: String,
    pub new_device_proof_signature: Vec<u8>,
    pub proof: Option<Proof>,
}

Submit proof against the declared method for an in-flight attempt. The proof variant must match the attempt’s kind. weft#183/#185/#186.

Fields

recovery_attempt_id: String

client_operation_id: String

new_device_proof_signature: Vec<u8>

Proof of possession of the new_device_public_key carried by the selected proof variant (weft#2047 leg 2). Closes the attacker-choosable-new-key plant: the recovery method (passkey / guardians / paper code) authorizes that recovery, but on its own it does not prove the caller holds the private half of the key the recovered identity gets bound to, so an attacker who cleared the recovery gate could bind the account to a key they do not control. This is a raw 64-byte Ed25519 signature by the NEW device private key over the 32-byte digest SHA256(“heddle-recovery-new-device-pop-v1” || 0x00 || recovery_attempt_id (UTF-8) || 0x00 || new_device_public_key). See heddle_api::signing::recovery_new_device_pop_digest. Binding recovery_attempt_id makes the proof single-use for this attempt. The server recomputes the digest and verifies the signature against the accepted variant’s new_device_public_key before running the completion cascade; a missing or invalid signature fails the proof.

proof: Option<Proof>

Trait Implementations

impl Clone for SubmitRecoveryProofRequest

fn clone(&self) -> SubmitRecoveryProofRequest

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SubmitRecoveryProofRequest

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SubmitRecoveryProofRequest

fn default() -> Self

Returns the “default value” for a type.

impl Message for SubmitRecoveryProofRequest

fn encoded_len(&self) -> usize

Returns the encoded length of the message without a length delimiter.

fn clear(&mut self)

Clears the message, resetting all fields to their default.

fn encode(&self, buf: &mut impl BufMut) -> Result<(), EncodeError>

where Self: Sized,

Encodes the message to a buffer.

fn encode_to_vec(&self) -> Vec<u8>

where Self: Sized,

Encodes the message to a newly allocated buffer.

fn encode_length_delimited( &self, buf: &mut impl BufMut, ) -> Result<(), EncodeError>

where Self: Sized,

Encodes the message with a length-delimiter to a buffer.

fn encode_length_delimited_to_vec(&self) -> Vec<u8>

where Self: Sized,

Encodes the message with a length-delimiter to a newly allocated buffer.

fn decode(buf: impl Buf) -> Result<Self, DecodeError>

where Self: Default,

Decodes an instance of the message from a buffer.

fn decode_length_delimited(buf: impl Buf) -> Result<Self, DecodeError>

where Self: Default,

Decodes a length-delimited instance of the message from the buffer.

fn merge(&mut self, buf: impl Buf) -> Result<(), DecodeError>

where Self: Sized,

Decodes an instance of the message from a buffer, and merges it into self.

fn merge_length_delimited(&mut self, buf: impl Buf) -> Result<(), DecodeError>

where Self: Sized,

Decodes a length-delimited instance of the message from buffer, and merges it into self.

impl PartialEq for SubmitRecoveryProofRequest

fn eq(&self, other: &SubmitRecoveryProofRequest) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for SubmitRecoveryProofRequest