Expand description
Offline Client–Host authorization. No Space, cloud session or transport ownership.
Structs§
- Auth
Error - Only authenticated responses may drive refresh/retry. Rejections precede dispatch.
- Authorization
Receipt - Client
Binding - Context
Request - Enrollment
Challenge - Enrollment
Challenge Request - Enrollment
Request - Grant
- Cloud claims are short-lived evidence for registration, never LAN bearer credentials.
- Host
Context - Local
Authorization - Possession
- Public
Key - Public P-256 point; x/y are exactly 32 bytes, base64url without padding.
- Signing
Key - Signing
KeySet - A complete authoritative snapshot from the configured HTTPS issuer.
Enums§
- Error
Code - Signing
KeyStatus - Verification-only permits an overlap. Disabled never accepts proofs or bindings.