Enum VerifyError 

pub enum VerifyError {
    Unsigned,
    UnknownKid {
        kid: String,
    },
    UnsupportedAlg {
        alg: String,
    },
    Malformed(String),
    BadSignature {
        kid: String,
    },
    Stale {
        kid: String,
        age_ms: i64,
        max_age_ms: u128,
    },
}

Why a message was not accepted as backend-authored.

Deliberately distinguishes “carries no signature” from every other case. During stages 1–2 of the rollout Unsigned is expected and benign, while the rest mean something is wrong — conflating them would hide a real failure inside a normal one for the whole migration window.

Variants

Unsigned

No signature headers at all. Normal until enforcement is switched on.

UnknownKid

Signed, but the kid is not on this agent’s ring.

The operationally dangerous case: an agent that never received a new key looks, from the operator’s side, exactly like a backend that is not sending commands — and a mid-rotation fleet is full of agents in that state. Callers must surface this, not just log it locally.

Fields

kid: String

UnsupportedAlg

Signed with an algorithm this build does not implement.

Fields

alg: String

Malformed(String)

Signature header present but not decodable as a signature.

BadSignature

Cryptographically invalid for the bytes received.

Fields

kid: String

Stale

Valid, by a key whose policy bounds how old a signature may be, and this one is older. Distinct from VerifyError::BadSignature because the signature is genuine — what failed is the policy, and the two want different responses.

Fields

kid: String

age_ms: i64

max_age_ms: u128

Trait Implementations

impl Clone for VerifyError

fn clone(&self) -> VerifyError

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for VerifyError

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for VerifyError

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for VerifyError

impl Error for VerifyError

fn source(&self) -> Option<&(dyn Error + 'static)>

Returns the lower-level source of this error, if any.

fn description(&self) -> &str

👎Deprecated since 1.42.0:

use the Display impl or to_string()

fn cause(&self) -> Option<&dyn Error>

👎Deprecated since 1.33.0:

replaced by Error::source, which can support downcasting

fn provide<'a>(&'a self, request: &mut Request<'a>)

🔬This is a nightly-only experimental API. (error_generic_member_access)

Provides type-based access to context intended for error reports.

impl PartialEq for VerifyError

fn eq(&self, other: &VerifyError) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for VerifyError