Struct Member 

pub struct Member {
    pub capabilities: MemberCapabilities,
    pub verify_key: Option<String>,
    pub kdf_nonce: Option<String>,
    pub seed_wrap_passphrase: Option<String>,
    pub seed_wrap_recovery: Option<String>,
    pub enrollment_verifier: Option<String>,
    pub ai_delegations: BTreeMap<String, AiDelegationEntry>,
    pub crypt_wraps: BTreeMap<String, String>,
    pub attestation: Option<Attestation>,
}

Fields

capabilities: MemberCapabilities

verify_key: Option<String>

kdf_nonce: Option<String>

seed_wrap_passphrase: Option<String>

AES-256-GCM ciphertext of the member’s identity seed, encrypted under a KEK derived from passphrase + kdf_nonce via Argon2id (ADR-039). Hex-encoded nonce || ciphertext || tag.

seed_wrap_recovery: Option<String>

AES-256-GCM ciphertext of the same seed, encrypted under a KEK derived from a recovery key via Argon2id (ADR-039). The recovery key itself is generated at joy auth init, displayed once, and stored externally by the user. Hex-encoded.

enrollment_verifier: Option<String>

ai_delegations: BTreeMap<String, AiDelegationEntry>

crypt_wraps: BTreeMap<String, String>

Per-member Crypt zone-key wraps. Map from zone name to the hex-encoded nonce || ciphertext || tag produced by joy_crypt::wrap::wrap over the zone key. The KEK derives from the member’s identity seed via HKDF-SHA256 with a fixed “crypt-member-kek” tag.

attestation: Option<Attestation>

Implementations

impl Member

pub fn new(capabilities: MemberCapabilities) -> Self

Create a member with the given capabilities and no auth fields.

pub fn has_capability(&self, cap: &Capability) -> bool

Check whether this member has a specific capability.

Trait Implementations

impl Clone for Member

fn clone(&self) -> Member

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Member

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for Member

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for Member

fn eq(&self, other: &Member) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for Member

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for Member