Enum IdentityAssurance 

pub enum IdentityAssurance {
    Anonymous,
    Pseudonymous {
        ephemeral_key: Jwk,
    },
    Identified {
        credential_kind: CredentialKind,
    },
    TaskScoped {
        identity: IdentityId,
        task_id: String,
        scopes: Vec<String>,
        expires_at: DateTime<Utc>,
    },
    UserAuthorized {
        identity: IdentityId,
        user_id: IdentityId,
        scopes: Vec<String>,
    },
    DtlsFingerprint {
        algorithm: String,
        value: String,
    },
}

IdentityAssurance gradient per CONVERSATION_PROTOCOL.md §5.6.

The DtlsFingerprint variant is always compiled (downstream crates like rvoip-auth-core match on it); the identity-fingerprint-binding feature flag in rvoip-core controls whether production fingerprint verification is wired by default. See INTERFACE_DESIGN.md §8.4.

Variants

Anonymous

Pseudonymous

Fields

ephemeral_key: Jwk

Identified

Fields

credential_kind: CredentialKind

TaskScoped

Fields

identity: IdentityId

task_id: String

scopes: Vec<String>

expires_at: DateTime<Utc>

UserAuthorized

Fields

identity: IdentityId

user_id: IdentityId

scopes: Vec<String>

DtlsFingerprint

D2 — DTLS-SRTP fingerprint binding (RFC 8122 §5). algorithm is the IANA hash name (e.g. "sha-256"); value is the colon-separated hex digest as it appears in the SDP a=fingerprint: attribute.

Fields

algorithm: String

value: String

Implementations

impl IdentityAssurance

pub const fn kind(&self) -> &'static str

Stable, credential-free assurance class for policy diagnostics and cross-crate events. This deliberately does not format embedded keys, fingerprints, user IDs, or scopes.

Trait Implementations

impl Clone for IdentityAssurance

fn clone(&self) -> IdentityAssurance

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for IdentityAssurance

fn fmt(&self, formatter: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.