Struct Dat 

pub struct Dat {
    pub header: DatHeader,
    pub claims: DatClaims,
    /* private fields */
}

A complete Delegation Attestation Token.

Fields

header: DatHeader

claims: DatClaims

Implementations

impl Dat

pub fn issue( issuer_did: &str, subject_did: &str, scope: Vec<String>, expires_at: DateTime<Utc>, constraints: Option<DatConstraints>, config_attestation: Option<String>, signing_key: &KeyPair, ) -> Result<Self>

Issue a new DAT signed by the issuer’s keypair.

pub fn to_compact(&self) -> Result<String>

Serialize to compact JWS format: header.payload.signature

pub fn from_compact(compact: &str) -> Result<Self>

Parse a compact JWS string into a DAT (without verifying the signature).

Preserves the raw base64url-encoded header.payload as raw_signing_input so that verify_signature can verify against the exact original bytes.

pub fn verify_signature(&self, public_key_bytes: &[u8; 32]) -> Result<()>

Verify the DAT’s signature against a public key.

Uses the raw signing input from the original compact JWS when available, falling back to re-serialization for tokens created via issue().

pub fn is_expired(&self) -> bool

Check if the DAT is expired.

pub fn is_not_yet_valid(&self) -> bool

Check if the DAT is not yet valid (before nbf).

pub fn validate_timing(&self) -> Result<()>

Validate timing constraints (not expired, not before valid).

pub fn verify( &self, public_key_bytes: &[u8; 32], required_scope: &str, ctx: &EvaluationContext, ) -> Result<()>

Full verification pipeline.

Runs all checks in order:

1. Signature verification
2. Timing (exp + nbf)
3. Scope — required_scope must be permitted by the DAT’s scope set
4. Constraint policy engine (rate limit, IP, trust, depth, geofence, time windows)
5. Config attestation (if constraint requires it)

Delegation depth is taken as the maximum of ctx.delegation_depth and the length of claims.delegation_chain, so the stricter value always wins.

Pass required_scope = "" to skip the scope check (e.g. for token introspection).

Trait Implementations

impl Clone for Dat

fn clone(&self) -> Dat

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Dat

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.