Crate philharmonic_connector_service 

Verification primitives for Philharmonic connector authorization tokens.

Structs

ConnectorCallContext

Verified call metadata passed to connector implementations.

ConnectorTokenClaims

Verified claims carried in the connector authorization token payload.

MintingKeyEntry

One minting key plus its validity window.

MintingKeyRegistry

In-memory lookup table of minting keys by key identifier.

RealmPrivateKeyEntry

One realm-private hybrid KEM key entry plus validity metadata.

RealmPrivateKeyRegistry

In-memory lookup table of realm private keys by key identifier.

Sha256

A SHA-256 digest.

UnixMillis

Milliseconds since the Unix epoch (1970-01-01T00:00:00Z).

Uuid

A Universally Unique Identifier (UUID).

VerifiedDecryptedPayload

Verified connector call metadata plus decrypted payload bytes.

VerifyingKey

An ed25519 public key.

Enums

TokenVerifyError

Token verification failures in step-order.

Constants

MAX_PAYLOAD_BYTES

Default maximum accepted payload size in bytes (1 MiB).

Functions

decrypt_payload

Decrypt a verified connector payload with the realm private-key registry.

verify_and_decrypt

Verify Wave A token checks and decrypt Wave B payload checks in one call.

verify_and_decrypt_with_limit

Verify + decrypt with caller-specified payload-size limit.

verify_token

Verify a connector authorization token using the default payload-size limit.

verify_token_with_limit

Verify a connector authorization token with a caller-specified payload-size limit.