Enum Credentials 

pub enum Credentials {
    Public,
    OwnedDevice(OwnedDeviceCredentials),
    Bearer {
        biscuit: Vec<u8>,
        grant_envelope: Vec<u8>,
    },
    Signed {
        signer: Arc<Ed25519Signer>,
        biscuit: Vec<u8>,
        grant_envelope: Vec<u8>,
    },
}

Caller-selected authority. No variant discovers credentials or mints a key. Bearer-only service and anonymous tiers stay distinct from signed callers. Public-readable methods still carry proof for Signed callers. Only the host may classify a verified bearer as anonymous; this client never strips an account credential or retries it as public after authorization fails.

Variants

Public

OwnedDevice(OwnedDeviceCredentials)

Bearer

Fields

biscuit: Vec<u8>

Raw serialized Biscuit, directly from IssuedCredential.biscuit.

grant_envelope: Vec<u8>

Signed

Fields

signer: Arc<Ed25519Signer>

biscuit: Vec<u8>

Empty during a public, key-proved registration ceremony.

grant_envelope: Vec<u8>

Implementations

impl Credentials

pub fn owned_device( signer: Arc<Ed25519Signer>, authority: &[u8], ) -> Result<Self, Error>

Trait Implementations

impl Authorize for Credentials

async fn context( &self, method: &'static MethodDescriptor, body: &[u8], ) -> Result<CallContext, Error>

impl Clone for Credentials

fn clone(&self) -> Credentials

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.