pub fn verify<'a>(
ring: &'a KeyRing,
body: &[u8],
headers: &SigHeaders,
now_ms: i64,
) -> Result<Verified<'a>, VerifyError>Expand description
Verify body against the signature headers using ring.
Verification is over the exact received bytes; deserialization happens afterwards, at the caller. That ordering is what removes canonicalisation from the problem — there is no need for serde to produce byte-identical output on both sides, only for the bytes to arrive unchanged.