ic_auth/lib.rs
1//! Pure application-token encoding and optional signature/token/session machinery.
2//!
3//! Hashing untrusted material does not authenticate it. Applications must not
4//! admit tokens by hashing them or checking just one signature. Use the optional
5//! token verifier with protected host inputs. The optional session engine uses
6//! one explicit host transaction for admission and replay consumption.
7
8pub mod canonical;
9pub mod certificate_issuance;
10pub mod chain_key_batch;
11pub mod session_request;
12pub mod token_preparation;
13
14#[cfg(feature = "chain-key-verification")]
15pub mod chain_key_signature;
16
17#[cfg(feature = "canister-signature-preparation")]
18pub mod signature_store;
19
20#[cfg(feature = "canister-signature-verification")]
21pub mod canister_signature;
22
23#[cfg(feature = "token-verification")]
24pub mod token;
25
26#[cfg(feature = "sessions")]
27pub mod session;