Enum ValidationError 

#[non_exhaustive]
pub enum ValidationError {
    Jws(JwsError),
    MissingKid,
    InvalidKid {
        kid: String,
        source: DidError,
    },
    KidWithParameters(DidUrl),
    UnexpectedTyp {
        expected: &'static str,
        found: String,
    },
    Payload(String),
    Credential(CredentialError),
    KeyResolution {
        kid: DidUrl,
        source: KeyResolutionError,
    },
    Signature(VerificationError),
    IssuerMismatch {
        issuer: Uri,
        kid: DidUrl,
    },
    NotDid {
        role: &'static str,
        id: String,
    },
    HolderMismatch {
        holder: Uri,
        kid: DidUrl,
    },
    NotYetValid {
        not_before: DateTime<Utc>,
        now: DateTime<Utc>,
    },
    Expired {
        expired_at: DateTime<Utc>,
        now: DateTime<Utc>,
    },
    IssuedInFuture {
        issued_at: DateTime<Utc>,
        now: DateTime<Utc>,
    },
    AudienceMismatch {
        expected: String,
        found: Option<OneOrMany<String>>,
    },
    NonceMismatch {
        expected: String,
        found: Option<String>,
    },
    StatusUnchecked(String),
    Status(StatusError),
    SubjectHolderMismatch {
        subject: Option<Uri>,
        holder: Uri,
    },
}

Available on crate feature vc only.

Why a credential or presentation JWT did not validate.

Variants (Non-exhaustive)

Non-exhaustive enums could have additional variants added in future. Therefore, when matching against variants of non-exhaustive enums, an extra wildcard arm must be added to account for any future variants.

Jws(JwsError)

The token is not a compact JWS this crate decodes.

MissingKid

The JWS header has no kid, so the signing key cannot be found.

InvalidKid

The kid is not a DID URL naming a verification method.

Fields

kid: String

The kid.

source: DidError

Why it did not parse.

KidWithParameters(DidUrl)

The kid carries a path or DID parameters. versionId and versionTime could select a document version that still lists a retired key, so only did:…#fragment keys are accepted.

UnexpectedTyp

The header typ is not the one the profile requires.

Fields

expected: &'static str

The typ the profile requires.

found: String

The typ found.

Payload(String)

The payload is not a JSON claims set.

Credential(CredentialError)

The claims do not map to a credential or presentation.

KeyResolution

The key kid names could not be resolved.

Fields

kid: DidUrl

The kid.

source: KeyResolutionError

What went wrong.

Signature(VerificationError)

The signature does not verify under the resolved key.

IssuerMismatch

The issuer of the credential does not control the key that signed it.

Fields

issuer: Uri

The issuer of the credential.

kid: DidUrl

The key that signed the JWT.

NotDid

The issuer is not a DID, so no key of it can be resolved.

Fields

role: &'static str

issuer or holder.

id: String

The identifier.

HolderMismatch

The holder of the presentation does not control the key that signed it.

Fields

holder: Uri

The holder of the presentation.

kid: DidUrl

The key that signed the JWT.

NotYetValid

The token or credential is not valid yet.

Fields

not_before: DateTime<Utc>

When it becomes valid.

now: DateTime<Utc>

The validation time.

Expired

The token or credential has expired.

Fields

expired_at: DateTime<Utc>

When it expired.

now: DateTime<Utc>

The validation time.

IssuedInFuture

The token claims to have been issued in the future.

Fields

issued_at: DateTime<Utc>

The iat.

now: DateTime<Utc>

The validation time.

AudienceMismatch

The aud does not include the expected audience.

Fields

expected: String

The audience expected.

found: Option<OneOrMany<String>>

The aud found.

NonceMismatch

The nonce is not the expected one.

Fields

expected: String

The nonce expected.

found: Option<String>

The nonce found.

StatusUnchecked(String)

The credential has a credentialStatus and the validator has no StatusCheck for it.

Status(StatusError)

The status check failed or found the credential revoked or suspended.

SubjectHolderMismatch

The subject of a presented credential is not the holder presenting it.

Fields

subject: Option<Uri>

The id of the subject, if any.

holder: Uri

The holder of the presentation.

Trait Implementations

impl Debug for ValidationError

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for ValidationError

fn fmt(&self, __formatter: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Error for ValidationError

fn source(&self) -> Option<&(dyn Error + 'static)>

Returns the lower-level source of this error, if any.

fn description(&self) -> &str

👎Deprecated since 1.42.0:

use the Display impl or to_string()

fn cause(&self) -> Option<&dyn Error>

👎Deprecated since 1.33.0:

replaced by Error::source, which can support downcasting

fn provide<'a>(&'a self, request: &mut Request<'a>)

🔬This is a nightly-only experimental API. (error_generic_member_access)

Provides type-based access to context intended for error reports.

impl From<CredentialError> for ValidationError

fn from(source: CredentialError) -> Self

Converts to this type from the input type.

impl From<JwsError> for ValidationError

fn from(source: JwsError) -> Self

Converts to this type from the input type.

impl From<StatusError> for ValidationError

fn from(source: StatusError) -> Self

Converts to this type from the input type.

impl From<ValidationError> for DomainLinkageError

Available on crate feature domain-linkage only.

fn from(source: ValidationError) -> Self

Converts to this type from the input type.

impl From<ValidationError> for SdJwtValidationError

Available on crate feature sd-jwt only.

fn from(source: ValidationError) -> Self

Converts to this type from the input type.

impl From<VerificationError> for ValidationError

fn from(source: VerificationError) -> Self

Converts to this type from the input type.