Struct mls_rs_identity_x509::X509IdentityProvider

#[non_exhaustive]
pub struct X509IdentityProvider<IE, V, IEP> {
    pub identity_extractor: IE,
    pub validator: V,
    pub warning_provider: IEP,
}

A customizable generic X.509 certificate identity provider.

This provider forwards its individual IdentityProvider behavior to its generic sub-components.

Only X509 credentials are supported by this provider.

Fields (Non-exhaustive)

Non-exhaustive structs could have additional fields added in future. Therefore, non-exhaustive structs cannot be constructed in external crates using the traditional Struct { .. } syntax; cannot be matched against without a wildcard ..; and struct update syntax will not work.

identity_extractor: IE

validator: V

warning_provider: IEP

Implementations

impl<IE, V, IEP> X509IdentityProvider<IE, V, IEP>

where IE: X509IdentityExtractor, V: X509CredentialValidator, IEP: X509WarningProvider,

pub fn new(identity_extractor: IE, validator: V, warning_provider: IEP) -> Self

Create a new identity provider.

pub fn validate( &self, signing_identity: &SigningIdentity, timestamp: Option<MlsTime> ) -> Result<(), X509IdentityError>

Determine if a certificate is valid based on the behavior of the underlying validator provided.

pub fn identity( &self, signing_id: &SigningIdentity ) -> Result<Vec<u8>, X509IdentityError>

Produce a unique identity value to represent the entity controlling a certificate credential within an MLS group.

pub fn valid_successor( &self, predecessor: &SigningIdentity, successor: &SigningIdentity ) -> Result<bool, X509IdentityError>

Determine if successor is controlled by the same entity as predecessor based on the behavior of the underlying identity extractor provided.

pub fn supported_types(&self) -> Vec<CredentialType>

Supported credential types.

Only CredentialType::X509 is supported.

pub fn identity_warnings( &self, update: &RosterUpdate ) -> Result<Vec<IdentityWarning>, X509IdentityError>

Gather identity warnings based on the rules provided by the underlying warning provider.

Trait Implementations

impl<IE: Clone, V: Clone, IEP: Clone> Clone for X509IdentityProvider<IE, V, IEP>

fn clone(&self) -> X509IdentityProvider<IE, V, IEP>

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<IE: Debug, V: Debug, IEP: Debug> Debug for X509IdentityProvider<IE, V, IEP>

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<IE, V, IEP> IdentityProvider for X509IdentityProvider<IE, V, IEP>

where IE: X509IdentityExtractor + Send + Sync, V: X509CredentialValidator + Send + Sync, IEP: X509WarningProvider + Send + Sync,

type Error = X509IdentityError

Error type that this provider returns on internal failure.

fn validate_member( &self, signing_identity: &SigningIdentity, timestamp: Option<MlsTime>, _extensions: Option<&ExtensionList> ) -> Result<(), Self::Error>

Determine if signing_identity is valid for a group member.

fn validate_external_sender( &self, signing_identity: &SigningIdentity, timestamp: Option<MlsTime>, _extensions: Option<&ExtensionList> ) -> Result<(), Self::Error>

Determine if signing_identity is valid for an external sender in the ExternalSendersExtension stored in the group context.

fn identity(&self, signing_id: &SigningIdentity) -> Result<Vec<u8>, Self::Error>

A unique identifier for signing_identity.

fn valid_successor( &self, predecessor: &SigningIdentity, successor: &SigningIdentity ) -> Result<bool, Self::Error>

Determines if successor can remove predecessor as part of an external commit.

fn supported_types(&self) -> Vec<CredentialType>

Credential types that are supported by this provider.

fn identity_warnings( &self, update: &RosterUpdate ) -> Result<Vec<IdentityWarning>, Self::Error>

Throw warnings based on changes to a group roster.