Struct NativeAssertionBridge 

pub struct NativeAssertionBridge { /* private fields */ }

A host may replace its delivery channel after a webview reload without changing the authenticated epoch. Logout/account replacement must retire this bridge; Rust capabilities observe that epoch change immediately.

Implementations

impl NativeAssertionBridge

pub fn new( session_key: String, sink: impl Fn(NativeAssertionRequest) -> Result<(), String> + Send + Sync + 'static, ) -> Result<Self>

pub fn rebind( &self, sink: impl Fn(NativeAssertionRequest) -> Result<(), String> + Send + Sync + 'static, ) -> Result<()>

pub fn complete( &self, request_id: &str, result: Result<IdentityAssertion, String>, ) -> Result<bool>

Complete only the request issued to the current delivery channel. Late or duplicate replies cannot install identity material for another epoch.

pub fn retire(&self) -> Result<()>

Trait Implementations

impl AssertionProvider for NativeAssertionBridge

fn assertion<'life0, 'async_trait>( &'life0 self, __arg1: bool, ) -> Pin<Box<dyn Future<Output = Result<IdentityAssertion>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait,

fn assertion_for_device<'life0, 'life1, 'async_trait>( &'life0 self, refresh: bool, device: &'life1 str, ) -> Pin<Box<dyn Future<Output = Result<IdentityAssertion>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Returns an assertion for the exact durable installation being enrolled.

fn assertion_for_device_recovery<'life0, 'life1, 'async_trait>( &'life0 self, device: &'life1 str, ) -> Pin<Box<dyn Future<Output = Result<IdentityAssertion>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Returns a newly authorized assertion after OpenRTC reports that this installation ID is bound to a different public key. Consumer backends should require recent interactive authentication before adding their recovery authorization claim. This is never called for another 412.

fn session_key(&self) -> Result<Option<String>>

Stable, non-secret local identifier for one signed-in principal. It changes on login/logout/account switch, never on access-token refresh. OpenRTC hashes it with the app and install-key thumbprint before asking the certificate store for a cold-start lookup. None preserves the RC assertion-first compatibility behavior.

fn identity_epoch(&self) -> u64

Monotonic application-owned login epoch. Increment it only for login, logout, account switch, or explicit revocation–never for an ordinary OAuth access-token refresh.

fn subscribe_identity_epoch(&self) -> Option<Receiver<u64>>

Optional immediate epoch observer. OpenRTC closes every capability created under the old epoch when this value changes. Hosts without an observer must explicitly close their handles during logout/account switch; grant renewal still fails closed if identity_epoch() changed.