Struct CredentialVerifier 

pub struct CredentialVerifier {
    pub kid: String,
    pub salt: String,
    pub secret_sha256: String,
    pub signer_pk_hex: String,
    pub not_after_ms: Option<u64>,
}

The verifier half of one credential key, as an operator authors it.

The salted digest of a secret they wrote to their own secret manager, plus the public key of the pair that secret’s holder signs identity envelopes with. Never a raw secret — CredentialDialer::enroll_credential and CredentialDialer::add_credential_key don’t accept one: the control plane never mints or holds the secret itself.

Fields

kid: String

Stable, operator-visible key id, unique within its record.

salt: String

Per-key salt mixed into the digest (not secret).

secret_sha256: String

hex(sha256(salt || secret)). The secret itself is never sent.

signer_pk_hex: String

The ed25519 public key this key signs identity envelopes with, hex-encoded.

not_after_ms: Option<u64>

Hard expiry (unix ms), independent of lifecycle state. None means no expiry.

Trait Implementations

impl Clone for CredentialVerifier

fn clone(&self) -> CredentialVerifier

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CredentialVerifier

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl From<CredentialVerifier> for CredentialKeyVerifier

fn from(verifier: CredentialVerifier) -> Self

Converts to this type from the input type.