Crate ic_auth_wire 

Controlled portable-session transport. No endpoint installation, authority, cryptography, session storage or delivery/retry policy is supplied here.

Re-exports

pub use ic_wire as wire;

Modules

model

Bounded transport projections. Conversion is structural, never verification.

Structs

CredentialEnvelope

Data-envelope identity, not a callable issuer method or signing format.

EstablishSession

Controlled admission contract; consumers bind it to their own update export.

Logout

Caller-authenticated logout; no submitted proof or caller identity is trusted.

ReadSession

Proof-free local read contract; the runtime caller selects the session.

SessionInput

Admission narrowing accompanies the exact opaque signed credential.

SessionView

A receiver’s authenticated local reply, never a transferable authorization.

Constants

BROWSER_DEFAULT_CREDENTIAL_BYTES

Default browser retention cap for a complete credential frame. Larger certified envelopes require an explicitly selected client cap; Wire’s own frame/field budgets continue to apply. Refusal is client invalid_material.

BROWSER_LOGOUT_RESPONSE_BYTES

Browser logout response frame cap. All current reply variants fit; extensions must review this intentionally narrower policy than the shared reply budget.

BROWSER_MAX_CONFIGURED_CREDENTIAL_BYTES

Maximum configurable browser retention cap, not an override of Wire limits. Preserves the client option range; actual frames remain bounded by the codec.