Expand description
Pure application-token encoding and optional IC canister-signature verification.
Hashing untrusted material does not authenticate it. Applications must not admit tokens using this package until complete proof verification is supplied. Signature verification alone does not check token grants, expiry or authority.
Modulesยง
- canonical
- Canonical signed bytes for the existing Canic application-token protocol. Domains and tags are protocol identities, not package branding. This module does not verify signatures, authority, validity or caller binding.