Struct DelegatedIdentity 

pub struct DelegatedIdentity { /* private fields */ }

An identity that has been delegated the authority to authenticate as a different principal.

Implementations

impl DelegatedIdentity

pub fn new( from_key: Vec<u8>, to: Box<dyn Identity>, chain: Vec<SignedDelegation>, ) -> Result<Self, DelegationError>

Creates a delegated identity that signs using to, for the principal corresponding to the public key from_key.

chain must be a list of delegations connecting from_key to to.public_key(), and in that order; otherwise, this function will return an error.

Canister signature keys in the chain are verified against the IC mainnet root key. Use new_with_root_key to verify against a different root key (e.g. for a local replica or testnet).

pub fn new_with_root_key( from_key: Vec<u8>, to: Box<dyn Identity>, chain: Vec<SignedDelegation>, root_key: &[u8], ) -> Result<Self, DelegationError>

Creates a delegated identity that signs using to, for the principal corresponding to the public key from_key.

chain must be a list of delegations connecting from_key to to.public_key(), and in that order; otherwise, this function will return an error.

root_key is the DER-encoded BLS public key of the IC root (or whichever trust anchor is appropriate for the network), required to verify canister signature keys in the chain.

pub fn new_unchecked( from_key: Vec<u8>, to: Box<dyn Identity>, chain: Vec<SignedDelegation>, ) -> Self

Creates a delegated identity that signs using to, for the principal corresponding to the public key from_key.

chain must be a list of delegations connecting from_key to to.public_key(), and in that order; otherwise, the replica will reject this delegation when used as an identity.

Trait Implementations

impl Identity for DelegatedIdentity

fn sender(&self) -> Result<Principal, String>

Returns a sender, ie. the Principal ID that is used to sign a request.

fn public_key(&self) -> Option<Vec<u8>>

Produce the public key commonly returned in Signature.

fn sign(&self, content: &EnvelopeContent) -> Result<Signature, String>

Sign a request ID derived from a content map.

fn sign_delegation(&self, content: &Delegation) -> Result<Signature, String>

Sign a delegation to let another key be used to authenticate sender.

fn sign_arbitrary(&self, content: &[u8]) -> Result<Signature, String>

Sign arbitrary bytes.

fn delegation_chain(&self) -> Vec<SignedDelegation>

A list of signed delegations connecting sender to public_key, and in that order.

fn sender_info(&self) -> Option<SenderInfo>

Returns canister-certified sender information to include in the request envelope, or None.