Crate ockam_identity

Identity is an abstraction over Identitys and Vaults, easing the use of these primitives in authentication and authorization APIs.

Re-exports

• pub use error::*;

Modules

• access_control
  AccessControl implementation based on SecureChannel authentication guarantees
• api
  SecureChannel API
• authenticated_storage
  Storage used for previously authenticated info about others: attributes, public identities, etc.
• change
  Possible change of an Identity
• change_history
  Change history of an Identity Identity history
• credential
  Credential support
• credential_issuer
  Authority test support
• error
  Errors

Structs

• AllTrustPolicy
  Succeeds only if both TrustPolicy checks succeeded
• AnyTrustPolicy
  Succeeds if any or both TrustPolicy checks succeeded
• AuthorityInfo
  Authority Info is a set of information defining an authority
• ChangeIdentifier
  Unique crate::change::IdentityChange identifier, computed as SHA256 of the change data
• CreateResponderChannelMessage
  SecureChannelListener message wrapper.
• CredentialMemoryRetriever
  Credential retriever that retrieves a credential from memory
• Identity
  Identity implementation
• IdentityBuilder
  Builder for Identity
• IdentityIdentifier
  An identifier of an Identity.
• IdentitySecureChannelLocalInfo
  Identity SecureChannel LocalInfo used for LocalMessage
• IdentityStateConst
  Identity-related constants
• KeyAttributes
  Attributes that are used to identify a key
• PublicIdentity
  Public part of an Identity
• SecureChannelListenerOptions
  Trust options for a Secure Channel Listener
• SecureChannelOptions
  Trust options for a Secure Channel
• SecureChannelRegistry
  Registry of all known Secure Channels
• SecureChannelRegistryEntry
  Known information about particular SecureChannel
• SecureChannelTrustInfo
  Authenticated data of the newly created SecureChannel to perform TrustPolicy check
• TrustContext
  A trust context defines which authorities are trusted to attest to which attributes, within a context. Our first implementation assumes that there is only one authority and it is trusted to attest to all attributes within this context.
• TrustEveryonePolicy
  Trust any participant
• TrustIdentifierPolicy
  TrustPolicy based on pre-known IdentityIdentifier of the other participant
• TrustMultiIdentifiersPolicy
  TrustPolicy based on list of pre-known IdentityIdentifiers of the possible participants
• TrustPublicKeyPolicy
  TrustPolicy based on pre-known PublicKey of the other participant

Constants

• IDENTITY_SECURE_CHANNEL_IDENTIFIER
  Identity SecureChannel LocalInfo unique Identifier

Traits

• CredentialRetriever
  Trait for retrieving a credential
• IdentityVault
  Traits required for a Vault implementation suitable for use in an Identity
• SecureChannelKeyExchanger
  KeyExchanger with extra constraints
• SecureChannelNewKeyExchanger
  NewKeyExchanger with extra constraints
• SecureChannelVault
  Vault with XX required functionality
• TrustPolicy
  TrustPolicy check is run when creating new SecureChannel, its creation only succeeds if this check succeeds

Functions

• to_hasher
  Return this vault as a hasher
• to_secret_vault
  Return this vault as a secret vault
• to_symmetric_vault
  Return this vault as a symmetric vault
• to_xx_vault
  Return this vault as a XX vault