Skip to main content

verify_approval_token

traverse_runtime::proposal

Function verify_approval_token 

Source 
pub fn verify_approval_token(
    token: &str,
    context: &ApprovalTokenVerificationContext<'_>,
) -> Result<ApprovalTokenClaims, ApprovalTokenError>
Expand description

Verifies an approval token’s Ed25519 signature, algorithm, key identity, issuer, audience, expiry, and exact binding to the proposal/snapshot digest and workspace (spec 109 FR-006a). Does not check use-count or revocation — see ApprovalTokenStore.

§Errors

Returns ApprovalTokenError on any malformed, unverifiable, expired, or mis-scoped token.