Struct StatusListCheck 

pub struct StatusListCheck<C, R, V = DefaultVerifier> { /* private fields */ }

Available on crate feature sd-jwt only.

A SdJwtStatusCheck for the Token Status List: fetches the status list token from the referenced URI with an HttpClient, verifies it was signed by the key its kid names, resolved under assertionMethod, and reads the status at the referenced index (Token Status List §8).

The check trusts the key kid resolves to; whether that key may speak for the list is the application’s policy to enforce around it, by restricting the resolver, say.

The status list URI comes from the credential, so the client fetches whatever an issuer names: client must enforce the protections ReqwestClient (feature reqwest) does (HTTPS only, no redirects, no non-public addresses after name resolution, a body limit and a timeout), or the status check becomes a request forgery primitive.

Implementations

impl<C: HttpClient, R: KeyResolver, V: JwsVerifier> StatusListCheck<C, R, V>

pub fn new(client: C, resolver: R, verifier: V) -> Self

A check fetching with client, resolving the status issuer’s key with resolver and verifying with verifier.

Trait Implementations

impl<C: Debug, R: Debug, V: Debug> Debug for StatusListCheck<C, R, V>

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<C: HttpClient, R: KeyResolver, V: JwsVerifier> SdJwtStatusCheck for StatusListCheck<C, R, V>

fn check<'life0, 'life1, 'async_trait>( &'life0 self, status: &'life1 Status, now: DateTime<Utc>, ) -> Pin<Box<dyn Future<Output = Result<(), StatusError>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Checks status at now.