pub struct ScopedResponse<'r, 'a> { /* private fields */ }Expand description
Signature and issuer-scope facts. Caller trust provenance, intended recipient, pending delegate revocation, nonce, time and critical demands remain explicit.
Implementations§
Source§impl<'r, 'a> ScopedResponse<'r, 'a>
impl<'r, 'a> ScopedResponse<'r, 'a>
Sourcepub fn signed(self) -> SignedResponse<'r, 'a>
pub fn signed(self) -> SignedResponse<'r, 'a>
Original authenticated response/signing source.
Sourcepub fn issuer(self) -> &'r Certificate<'a>
pub fn issuer(self) -> &'r Certificate<'a>
Selected target issuer, never inferred from included certificates.
Sourcepub fn issuing_key(self) -> Option<WorkingKey<'a>>
pub fn issuing_key(self) -> Option<WorkingKey<'a>>
Actual effective issuer key used by issuer-signature or delegation authentication. Explicit configured-responder trust does not run that operation and honestly returns None, never a fabricated standing key.
Sourcepub fn source(self) -> AuthoritySource
pub fn source(self) -> AuthoritySource
Explicit scope source, including unresolved delegated revocation.
Source§impl<'r, 'a> ScopedResponse<'r, 'a>
impl<'r, 'a> ScopedResponse<'r, 'a>
Sourcepub fn evaluate_with_target<'target, 'request, 'd, D: AsnDigest<'d> + ?Sized, E: Work>(
self,
request: &Request<'target, 'request>,
time: &Evaluation<'_, E>,
digest: &'d D,
) -> CallbackResult<TargetReading<'target, 'request, 'r, 'a>, D::Error>
pub fn evaluate_with_target<'target, 'request, 'd, D: AsnDigest<'d> + ?Sized, E: Work>( self, request: &Request<'target, 'request>, time: &Evaluation<'_, E>, digest: &'d D, ) -> CallbackResult<TargetReading<'target, 'request, 'r, 'a>, D::Error>
Run the same complete target-processing kernel once while retaining its original requested certificate. No hashing, parsing or allocation is repeated to recover provenance later. Failures retain their original result/cause; no positive target binding is returned for a lookup failure.
Sourcepub fn evaluate<'d, D: AsnDigest<'d> + ?Sized, E: Work>(
self,
request: &Request<'_, '_>,
time: &Evaluation<'_, E>,
digest: &'d D,
) -> CallbackResult<TargetEvidence<'r, 'a>, D::Error>
pub fn evaluate<'d, D: AsnDigest<'d> + ?Sized, E: Work>( self, request: &Request<'_, '_>, time: &Evaluation<'_, E>, digest: &'d D, ) -> CallbackResult<TargetEvidence<'r, 'a>, D::Error>
Evaluate the actual request against this issuer-scoped signed response. RFC6960 §3.2 requires identity, signer, authorization and temporal checks; this operation composes mechanism facts without choosing caller policy. https://www.rfc-editor.org/rfc/rfc6960#section-3.2