Enum ValidationError 

#[non_exhaustive]
pub enum ValidationError {
    Jws(JwsError),
    KeyReference(KeyReferenceError),
    UnexpectedTyp {
        expected: &'static str,
        found: String,
    },
    Payload(String),
    Credential(CredentialError),
    SdJwtPayload {
        claim: &'static str,
    },
    KeyResolution {
        key: Box<KeyReference>,
        source: KeyResolutionError,
    },
    Signature(VerificationError),
    IssuerMismatch {
        issuer: Uri,
        key: Box<KeyReference>,
    },
    NotDid {
        role: &'static str,
        id: String,
    },
    HolderMismatch {
        holder: Uri,
        key: Box<KeyReference>,
    },
    NotYetValid {
        not_before: DateTime<Utc>,
        now: DateTime<Utc>,
    },
    Expired {
        expired_at: DateTime<Utc>,
        now: DateTime<Utc>,
    },
    IssuedInFuture {
        issued_at: DateTime<Utc>,
        now: DateTime<Utc>,
    },
    AudienceMismatch {
        expected: String,
        found: Option<OneOrMany<String>>,
    },
    NonceMismatch {
        expected: String,
        found: Option<String>,
    },
    StatusUnchecked(String),
    Status(StatusError),
    SubjectHolderMismatch {
        subject: Option<Uri>,
        holder: Uri,
    },
    SdJwt(Box<SdJwtValidationError>),
}

Available on crate feature vc only.

Why a credential or presentation JWT did not validate.

Variants (Non-exhaustive)

Non-exhaustive enums could have additional variants added in future. Therefore, when matching against variants of non-exhaustive enums, an extra wildcard arm must be added to account for any future variants.

Jws(JwsError)

The token is not a compact JWS this crate decodes.

KeyReference(KeyReferenceError)

The JWS header names no key this crate can look for: no kid, a kid that is not a DID URL, a DID URL with a path or DID parameters, a relative kid without a DID issuer.

UnexpectedTyp

The header typ is not the one the profile requires.

Fields

expected: &'static str

The typ the profile requires.

found: String

The typ found.

Payload(String)

The payload is not a JSON claims set.

Credential(CredentialError)

The claims do not map to a credential or presentation.

SdJwtPayload

The payload carries _sd_alg, _sd or an array element {"...": "<digest>"}: it is the issuer-signed JWT of an SD-JWT, whose claims mean something else until its disclosures are processed, so it is not read as a plain JWT (RFC 8725 §3.12). SdJwtCredentialValidator of sd_jwt_vc validates it.

Fields

claim: &'static str

The claim found: _sd_alg, _sd or ....

KeyResolution

The key the token names could not be resolved.

Fields

key: Box<KeyReference>

Where the token says its key is.

source: KeyResolutionError

What went wrong.

Signature(VerificationError)

The signature does not verify under the resolved key.

IssuerMismatch

The issuer of the credential does not control the key that signed it.

Fields

issuer: Uri

The issuer of the credential.

key: Box<KeyReference>

Where the token says its key is.

NotDid

The issuer is not a DID, so no key of it can be resolved.

Fields

role: &'static str

issuer or holder.

id: String

The identifier.

HolderMismatch

The holder of the presentation does not control the key that signed it.

Fields

holder: Uri

The holder of the presentation.

key: Box<KeyReference>

Where the token says its key is.

NotYetValid

The token or credential is not valid yet.

Fields

not_before: DateTime<Utc>

When it becomes valid.

now: DateTime<Utc>

The validation time.

Expired

The token or credential has expired.

Fields

expired_at: DateTime<Utc>

When it expired.

now: DateTime<Utc>

The validation time.

IssuedInFuture

The token claims to have been issued in the future.

Fields

issued_at: DateTime<Utc>

The iat.

now: DateTime<Utc>

The validation time.

AudienceMismatch

The aud does not include the expected audience.

Fields

expected: String

The audience expected.

found: Option<OneOrMany<String>>

The aud found.

NonceMismatch

The nonce is not the expected one.

Fields

expected: String

The nonce expected.

found: Option<String>

The nonce found.

StatusUnchecked(String)

The credential has a credentialStatus and the validator has no StatusCheck for it.

Status(StatusError)

The status check failed or found the credential revoked or suspended.

SubjectHolderMismatch

The subject of a presented credential is not the holder presenting it.

Fields

subject: Option<Uri>

The id of the subject, if any.

holder: Uri

The holder of the presentation.

SdJwt(Box<SdJwtValidationError>)

Available on crate feature sd-jwt only.

A credential secured with SD-JWT, enveloped in a presentation, failed a check of its own: it is not a well-formed SD-JWT credential, or its key binding is missing or wrong. (A check shared with the JWT validators is reported as that check’s own variant.)

Trait Implementations

impl Debug for ValidationError

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for ValidationError

fn fmt(&self, __formatter: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Error for ValidationError

fn source(&self) -> Option<&(dyn Error + 'static)>

Returns the lower-level source of this error, if any.

fn description(&self) -> &str

👎Deprecated since 1.42.0:

use the Display impl or to_string()

fn cause(&self) -> Option<&dyn Error>

👎Deprecated since 1.33.0:

replaced by Error::source, which can support downcasting

fn provide<'a>(&'a self, request: &mut Request<'a>)

🔬This is a nightly-only experimental API. (error_generic_member_access)

Provides type-based access to context intended for error reports.

impl From<CredentialError> for ValidationError

fn from(source: CredentialError) -> Self

Converts to this type from the input type.

impl From<JwsError> for ValidationError

fn from(source: JwsError) -> Self

Converts to this type from the input type.

impl From<KeyReferenceError> for ValidationError

fn from(source: KeyReferenceError) -> Self

Converts to this type from the input type.

impl From<SdJwtValidationError> for ValidationError

fn from(error: SdJwtValidationError) -> Self

Unwraps a shared check’s error; boxes the SD-JWT-specific ones.

impl From<StatusError> for ValidationError

fn from(source: StatusError) -> Self

Converts to this type from the input type.

impl From<ValidationError> for DomainLinkageError

Available on crate feature domain-linkage only.

fn from(source: ValidationError) -> Self

Converts to this type from the input type.

impl From<ValidationError> for LinkedVpError

Available on crate feature linked-vp only.

fn from(source: ValidationError) -> Self

Converts to this type from the input type.

impl From<ValidationError> for SdJwtValidationError

Available on crate feature sd-jwt only.

fn from(source: ValidationError) -> Self

Converts to this type from the input type.

impl From<VerificationError> for ValidationError

fn from(source: VerificationError) -> Self

Converts to this type from the input type.