Struct PasswordOwnerSetupAuthorization 

pub struct PasswordOwnerSetupAuthorization {
    pub format_version: u32,
    pub action: u32,
    pub account_uuid: Vec<u8>,
    pub owner_state_hash: Vec<u8>,
    pub expected_revision: u64,
    pub setup_sha256: Vec<u8>,
    pub client_operation_id: String,
    pub expires_at: Option<Timestamp>,
}

Owner authorization for changing the password envelope. The owner signs SHA-256(“heddle-password-owner-setup-change-v1” || u32be(format_version) || u32be(action) || account_uuid[16] || owner_state_hash[32] || u64be(expected_revision) || setup_sha256[32] || u32be(client_operation_id UTF-8 byte length) || client_operation_id || i64be(expires_at Unix seconds)). expires_at has zero nanos and is future, with a bounded lifetime of at most 10 minutes from issuance. setup_sha256 is SHA-256 of the fixed-order v1 setup fields (the envelope’s fields in tag order, followed by auth_salt, verifier key, auth costs, auth_kdf_id and format_version; the possession signature is excluded), with byte fields raw and integers big-endian. DELETE uses 32 zero bytes. The current active account UUID, owner public key and owner ID MUST equal the setup envelope fields. Both actions CAS the account-lifetime revision. A successful PUT or DELETE atomically increments it and invalidates every outstanding password challenge and continuation. DELETE retains a tombstone revision; re-setup CASes against that value. Revision 0 is allowed only when no password setup has ever existed for this account; no revision is reused.

Fields

format_version: u32

Exactly 1; reject unknown versions.

action: u32

Exactly 1=PUT or 2=DELETE.

account_uuid: Vec<u8>

Exactly 16 bytes, non-nil.

owner_state_hash: Vec<u8>

Exactly 32 bytes, current accepted state.

expected_revision: u64

0 only if no setup ever existed; CAS thereafter.

setup_sha256: Vec<u8>

Exactly 32 bytes; zero for DELETE.

client_operation_id: String

1..128 UTF-8 bytes.

expires_at: Option<Timestamp>

Required; covered by signature.

Trait Implementations

impl Clone for PasswordOwnerSetupAuthorization

fn clone(&self) -> PasswordOwnerSetupAuthorization

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for PasswordOwnerSetupAuthorization

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Default for PasswordOwnerSetupAuthorization

fn default() -> PasswordOwnerSetupAuthorization

Returns the “default value” for a type.

impl Eq for PasswordOwnerSetupAuthorization

impl Hash for PasswordOwnerSetupAuthorization

fn hash<__H>(&self, state: &mut __H)

where __H: Hasher,

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl Message for PasswordOwnerSetupAuthorization

fn encoded_len(&self) -> usize

Returns the encoded length of the message without a length delimiter.

fn clear(&mut self)

Clears the message, resetting all fields to their default.

fn encode(&self, buf: &mut impl BufMut) -> Result<(), EncodeError>

where Self: Sized,

Encodes the message to a buffer.

fn encode_to_vec(&self) -> Vec<u8>

where Self: Sized,

Encodes the message to a newly allocated buffer.

fn encode_length_delimited( &self, buf: &mut impl BufMut, ) -> Result<(), EncodeError>

where Self: Sized,

Encodes the message with a length-delimiter to a buffer.

fn encode_length_delimited_to_vec(&self) -> Vec<u8>

where Self: Sized,

Encodes the message with a length-delimiter to a newly allocated buffer.

fn decode(buf: impl Buf) -> Result<Self, DecodeError>

where Self: Default,

Decodes an instance of the message from a buffer.

fn decode_length_delimited(buf: impl Buf) -> Result<Self, DecodeError>

where Self: Default,

Decodes a length-delimited instance of the message from the buffer.

fn merge(&mut self, buf: impl Buf) -> Result<(), DecodeError>

where Self: Sized,

Decodes an instance of the message from a buffer, and merges it into self.

fn merge_length_delimited(&mut self, buf: impl Buf) -> Result<(), DecodeError>

where Self: Sized,

Decodes a length-delimited instance of the message from buffer, and merges it into self.

impl PartialEq for PasswordOwnerSetupAuthorization

fn eq(&self, other: &PasswordOwnerSetupAuthorization) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for PasswordOwnerSetupAuthorization