Enum InviteeRestriction 

pub enum InviteeRestriction {
    Pubkey {
        fingerprint: String,
    },
    Cert {
        issuer_pubkey: String,
        allowed_subjects: Vec<String>,
    },
    Open,
}

Who may redeem an invitation. Three shapes; the default for new invitations is Cert.

Variants

Pubkey

Tightest: only the agent whose pubkey hashes to fingerprint may join. Fingerprint is sha256(canonical_pubkey)’s first 16 hex chars, matching pubkey_fingerprint in the trust CLI.

Fields

fingerprint: String

Cert

Production sweet spot: any agent holding a certificate issued by issuer_pubkey whose subject is in allowed_subjects.

Fields

issuer_pubkey: String

allowed_subjects: Vec<String>

Open

Anyone holding the blob may redeem. Opt-in only; the CLI refuses to mint an Open invitation without an explicit --open flag.

Trait Implementations

impl Clone for InviteeRestriction

fn clone(&self) -> InviteeRestriction

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for InviteeRestriction

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for InviteeRestriction

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for InviteeRestriction

impl PartialEq for InviteeRestriction

fn eq(&self, other: &InviteeRestriction) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for InviteeRestriction

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for InviteeRestriction