Expand description
Generic call-app authentication messages and the negotiated unencrypted app session. Host MMTLS authentication remains required. No socket or credential persistence is performed here; app encryption is distinct from media AEAD.
Structs§
- AppAuthority
- Accepted account/logout binding chosen by the account owner, not values recovered from an unauthenticated server message. It is not a session key.
- AppSession
- Server-selected app identity. No app keys exist in this branch. The server does not install the encrypted branch’s default expiry. Host account/logout authority still fences every use; hosts may impose a separate local deadline. Private app identities intentionally do not implement Debug or Serialize.
- Pending
AppAuth - One first-auth request. Consuming completion prevents accidental reuse after success, malformed data or rejection. The host must retain uncertain intent outcomes separately instead of automatically preparing another attempt.