Struct UcanToken 

pub struct UcanToken {
    pub version: String,
    pub issuer: String,
    pub audience: String,
    pub capabilities: Vec<Capability>,
    pub expiration: i64,
    pub not_before: Option<i64>,
    pub nonce: String,
    pub proof: Vec<String>,
    pub signature: String,
}

A UCAN token for capability delegation

Fields

version: String

Token version

issuer: String

Issuer DID (the delegator)

audience: String

Audience DID (the delegatee)

capabilities: Vec<Capability>

Capabilities being delegated

expiration: i64

Expiration timestamp (Unix epoch seconds)

not_before: Option<i64>

Not-before timestamp

nonce: String

Nonce for uniqueness

proof: Vec<String>

Proof chain — parent UCAN CIDs that authorize this delegation

signature: String

Signature of the token payload by the issuer

Implementations

impl UcanToken

pub fn new( issuer: String, audience: String, capabilities: Vec<Capability>, duration_secs: i64, ) -> Self

Create a new UCAN token (unsigned)

pub fn sign(&mut self, private_key_hex: &str) -> Result<(), LitError>

Sign the token with the issuer’s private key material

pub fn verify(&self, issuer_public_key_hex: &str) -> Result<bool, LitError>

Verify the token’s signature

pub fn is_valid(&self) -> bool

Check if the token is currently valid (not expired, not before)

pub fn has_capability(&self, resource: &str, action: &str) -> bool

Check if this token grants a specific capability

pub fn cid(&self) -> Result<String, LitError>

Get the content-addressable ID (hash) of this token

pub fn delegate( &self, new_audience: String, capabilities: Vec<Capability>, duration_secs: i64, ) -> Result<UcanToken, LitError>

Delegate a subset of capabilities to another agent (create a child UCAN)

Trait Implementations

impl Clone for UcanToken

fn clone(&self) -> UcanToken

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for UcanToken

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for UcanToken

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for UcanToken

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.