Struct MembershipToken 

pub struct MembershipToken {
    pub public_key: [u8; 32],
    pub mesh_id: [u8; 4],
    pub callsign: [u8; 12],
    pub issued_at_ms: u64,
    pub expires_at_ms: u64,
    pub authority_signature: [u8; 64],
}

A membership token binding a device to a callsign within a mesh

Issued by the mesh authority and verifiable by any node.

Fields

public_key: [u8; 32]

Member’s Ed25519 public key

mesh_id: [u8; 4]

Mesh ID this token is valid for (4 bytes from MeshGenesis)

callsign: [u8; 12]

Assigned callsign (up to 12 chars, null-padded)

issued_at_ms: u64

When this token was issued (milliseconds since Unix epoch)

expires_at_ms: u64

When this token expires (milliseconds since Unix epoch) 0 means no expiration

authority_signature: [u8; 64]

Authority’s Ed25519 signature over the above fields

Implementations

impl MembershipToken

pub fn issue( authority: &DeviceIdentity, genesis: &MeshGenesis, member_public_key: [u8; 32], callsign: &str, validity_ms: u64, ) -> Self

Issue a new membership token

Arguments

• authority - The mesh authority’s identity (must be mesh creator)
• genesis - The mesh genesis containing mesh_id
• member_public_key - The new member’s public key
• callsign - Human-readable callsign (max 12 chars)
• validity_ms - How long the token is valid (0 = forever)

Panics

Panics if callsign is longer than 12 characters.

pub fn issue_at( authority: &DeviceIdentity, mesh_id: [u8; 4], member_public_key: [u8; 32], callsign: &str, issued_at_ms: u64, expires_at_ms: u64, ) -> Self

Issue a token with explicit timestamps (for testing)

pub fn verify(&self, authority_public_key: &[u8; 32]) -> bool

Verify the token’s authority signature

Arguments

• authority_public_key - The mesh authority’s public key

Returns

true if the signature is valid

pub fn is_expired(&self, now_ms: u64) -> bool

Check if the token has expired

Arguments

• now_ms - Current time in milliseconds since epoch

Returns

true if the token has expired (expires_at_ms != 0 and now_ms > expires_at_ms)

pub fn is_valid(&self, authority_public_key: &[u8; 32], now_ms: u64) -> bool

Check if the token is valid (signature OK and not expired)

Arguments

• authority_public_key - The mesh authority’s public key
• now_ms - Current time in milliseconds since epoch

pub fn callsign_str(&self) -> &str

Get the callsign as a string (trimmed of null padding)

pub fn mesh_id_hex(&self) -> String

Get the mesh_id as a hex string (e.g., “A1B2C3D4”)

pub fn encode(&self) -> [u8; 128]

Encode token to wire format (128 bytes)

pub fn decode(data: &[u8]) -> Option<Self>

Decode token from wire format

Returns None if data is not exactly 128 bytes.

Trait Implementations

impl Clone for MembershipToken

fn clone(&self) -> MembershipToken

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for MembershipToken

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for MembershipToken

fn eq(&self, other: &MembershipToken) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Eq for MembershipToken

impl StructuralPartialEq for MembershipToken