pub struct AuthenticateInput {
pub session_id: String,
pub challenge: String,
pub signer_did: String,
pub created_time: Option<u64>,
pub session_pubkey_b58btc: Option<String>,
}Expand description
Inputs to /auth/authenticate after the transport layer has
verified the signer.
The transport layer (DIDComm unpack_signed, SIOPv2 JWS
verification, etc.) extracts the signer and produces this
struct; the canonical handler then validates against the
session and mints tokens.
Fields§
§session_id: String§challenge: String§signer_did: StringVerified signer DID. The transport layer must produce this from a cryptographic check (DIDComm authcrypt, JWS signature, etc.) — never echo it from the request body unchecked.
created_time: Option<u64>Optional message created_time for DIDComm freshness
checking. None for REST transports.
session_pubkey_b58btc: Option<String>Optional ephemeral session pubkey to register against
this session at the auth transition. SIOPv2 callers
(did-hosting-control) carry one to support
Data-Integrity-proof binding on subsequent
trust-task envelopes; DIDComm transports normally leave
this None. The route layer is responsible for any
shape-validation (e.g. z6Mk… Ed25519 multikey prefix)
before passing it in.
Trait Implementations§
Source§impl Clone for AuthenticateInput
impl Clone for AuthenticateInput
Source§fn clone(&self) -> AuthenticateInput
fn clone(&self) -> AuthenticateInput
1.0.0 (const: unstable) · Source§fn clone_from(&mut self, source: &Self)
fn clone_from(&mut self, source: &Self)
source. Read more