Expand description
Provider-neutral OpenRTC 2.0 control-plane client for pure native hosts.
Consumer applications own authentication, attestation registration, and secure private-key storage. OpenRTC owns assertion exchange, device enrollment, avenue-scoped gateway grants, renewal, and replay-safe device proofs. No Firebase type or project identifier is exposed by this module.
Structs§
- Memory
Native Device Certificate Store - Network-idle, process-local certificate cache for prototypes and tests. Production native applications should supply durable protected storage.
- Native
Anonymous Capability - A backend-free native capability. Its install-bound principal and device identity come from the host-secure Ed25519 key, and the handle owns exactly one live avenue.
- Native
Attestation Evidence - Native
Authenticated Devices - An authenticated device-mesh capability plus its stable app-scoped
principal. The handle remains network-idle until the runtime publishes its
initial presence, and
close()stops its socket and grant-refresh owner. - Native
Identity Assertion - Native
V2Capability Options - Native
V2Control Plane - Native
V2Devices Options - Native
V2Features - Native
V2Identity Credential Relay - Mutable opaque-credential relay for native runtimes constructed before the application finishes login. It carries only OpenRTC-issued device certificates and follows certificate renewal performed by the grant owner.
- Native
V2Signaling Slot - One-time, fail-closed signaling installation point for native hosts whose process is created before user authentication completes. Installation may happen exactly once; replacement requires closing and rebuilding the capability/runtime so this cannot become a shadow lifecycle owner.
- Stored
Native Device Certificate
Constants§
Traits§
- Native
Attestation Provider - Optional application-owned managed-attestation bridge. It is invoked only during enrollment or certificate renewal, never as a socket heartbeat.
- Native
Device Certificate Store - Application-owned durable certificate storage. Desktop applications should protect this value with owner-only file permissions or the OS credential store. A certificate is public-key bound, but remains bearer authorization and therefore must not be placed in logs or world-readable preferences.
- Native
Identity Assertion Provider - Application-owned source of short-lived OIDC/JWKS assertions.
- Native
V2Device Signer - Host secure-storage bridge for the per-install Ed25519 device key. Private key bytes never enter the OpenRTC runtime.