Struct VerifyConfig 

pub struct VerifyConfig { /* private fields */ }

Pinned trust roots the verifier consults. Constructed by the integrator; the verifier itself never fetches keys from the network.

Implementations

impl VerifyConfig

pub fn new() -> Self

pub fn pin_authority_jwk(self, jwk_json: &str) -> Result<Self, VerifyError>

Add an authority JWK (Ed25519, RFC 8037 form). The verifier computes kid = sha256(pubkey)[..16].hex() and indexes by it.

pub fn pin_vk(self, vk_hash_hex: &str, vk_bytes: Vec<u8>) -> Self

Pin a verifying key by its content hash. vk_hash_hex MAY have an optional 0x prefix; it is normalized to lowercase hex without prefix.

pub fn at_time(self, unix_secs: u64) -> Self

Override the wall clock for tests + fixture replay.

pub fn with_clock_skew(self, secs: u64) -> Self

Allow more clock skew than the default 30s (e.g. for batch replay of historical receipts).

pub fn knows_vk(&self, vk_hash_hex: &str) -> bool

True iff this vk_hash is pinned. vk_hash_hex may include 0x.

Trait Implementations

impl Clone for VerifyConfig

fn clone(&self) -> VerifyConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for VerifyConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for VerifyConfig

fn default() -> VerifyConfig

Returns the “default value” for a type.