Module ockam_identity::credentials

Services for creating and validating credentials

Structs

• AuthorityService
  An AuthorityService represents an authority which issued credentials
• CredentialAndPurposeKeyData
  Structure with both CredentialData and PurposeKeyAttestationData that we get after parsing and verifying corresponding [Credential] and super::super::models::PurposeKeyAttestation
• Credentials
  Service for managing [Credential]s
• CredentialsCreation
  Service for managing Credentials
• CredentialsIssuer
  This struct runs as a Worker to issue credentials based on a request/response protocol
• CredentialsMemoryRetriever
  Credentials retriever that retrieves a credential from memory
• CredentialsServerModule
  Implementation of the CredentialsService
• CredentialsVerification
  Service for managing [Credential]s
• OneTimeCode
  A one-time code can be used to enroll a node with some authenticated attributes It can be retrieve with a command like ockam project ticket --attribute component=control
• RemoteCredentialsRetriever
  Credentials retriever for credentials located on a different node
• RemoteCredentialsRetrieverInfo
  Information necessary to connect to a remote credential retriever
• TrustContext
  A trust context defines which authorities are trusted to attest to which attributes, within a context. Our first implementation assumes that there is only one authority and it is trusted to attest to all attributes within this context.

Constants

• MAX_CREDENTIAL_VALIDITY
  Maximum duration for a valid credential in seconds (30 days)
• PROJECT_MEMBER_SCHEMA
  Identifier for the schema of a project credential
• TRUST_CONTEXT_ID
  Name of the attribute identifying the trust context for that attribute, meaning from which set of trusted authorities the attribute comes from
• TRUST_CONTEXT_ID_UTF8
  The same as above but in string format

Traits

• CredentialsRetriever
  Trait for retrieving a credential for a given identity
• CredentialsServer
  This trait allows an identity to send its credential to another identity located at the end of a secure channel route

Functions

• secure_channel_required
  Return a response on the return route stating that a secure channel is needed to access the service