Expand description
Pure application-token encoding and optional token/IC signature verification.
Hashing untrusted material does not authenticate it. Applications must not admit tokens by hashing them or checking just one signature. Use the optional token verifier with protected host inputs; session admission and replay consumption remain separate host operations.
Modulesยง
- canonical
- Canonical signed bytes for the existing Canic application-token protocol. Domains and tags are protocol identities, not package branding. This module does not verify signatures, authority, validity or caller binding.