Struct TargetInformation 

pub struct TargetInformation<'a> { /* private fields */ }

Fully decoded extension, retaining original ranges and independently owned catalogues. The short operation used to read it need not remain alive.

Implementations

impl<'a> TargetInformation<'a>

pub fn read<W: Work>(extension: &Extension<'a>, work: &W) -> Result<Self>

Reads the complete original extension using the shared Extension reader. All alternatives are decoded before any membership callback can run. Catalogues and nested Name storage obey source and current work/capacity admission; no bytes are joined, retagged or re-encoded.

pub fn element(&self) -> Element<'a>

Original whole extension value SEQUENCE.

pub fn is_critical(&self) -> bool

Original extension criticality, not inferred from its identifier.

pub fn groups(&self) -> &[Group<'a>]

Original groups and their flat target ranges. Traversal by callers must be admitted by their own current Work; Self::check does this itself.

pub fn targets(&self) -> &[Target<'a>]

Original target order, with no implicit sorting or deduplication.

pub fn certificates(&self) -> &[TargetCertificate<'a>]

Typed forbidden alternatives, without treating them as accepted targets.

pub fn check<W: Work, E>( &self, recipients: &[GeneralName<'_>], work: &W, membership: impl FnMut(&GeneralName<'a>, &Execution<'_>) -> Result<Membership, E>, ) -> Result<Decision, CheckError<E>>

Tests recipient targeting only. Names must be already-known identities; successfully decode untrusted names before supplying them here.

RFC5755 §4.3.2 requires criticality, prohibits targetCert and treats all Targets groups as one union. These profile gates run before comparison or callback effects. A recipient-name match OR confirmed group membership suffices. Present empty groups match nothing. Other/X.400/EDI recipient names remain unproven because the shared name core only knows their encoded identity; their type-specific semantic identity is not inferred. This is not a complete AC profile check (including GeneralName profile restrictions), holder authentication or an authorization decision.

membership owns group discovery and must admit its own data-dependent work through the supplied execution. Unknown membership differs from a completed negative answer. Errors preserve their cause and original target span; external callback side effects cannot be rolled back.

Trait Implementations

impl<'a> Debug for TargetInformation<'a>

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.