Struct SignedInvite 

pub struct SignedInvite {
    pub group_id: String,
    pub stable_group_id: Option<String>,
    pub group_created_at: Option<u64>,
    pub group_name: String,
    pub group_description: Option<String>,
    pub policy: Option<GroupPolicy>,
    pub genesis_creation_nonce: Option<String>,
    pub inviter: String,
    pub invite_secret: String,
    pub created_at: u64,
    pub expires_at: u64,
    pub signature: String,
}

A signed invite token for joining a group.

Tokens are serialized to base64url for sharing via email, chat, QR codes, etc. The format is: x0x://invite/<base64url(json(SignedInvite))>

Fields

group_id: String

MLS group ID (hex-encoded).

stable_group_id: Option<String>

Stable D.3 group_id, if known.

group_created_at: Option<u64>

Authority-created timestamp for the group.

group_name: String

Human-readable group name.

group_description: Option<String>

Human-readable group description.

policy: Option<GroupPolicy>

Full policy snapshot used to seed the joiner’s local GroupInfo.

genesis_creation_nonce: Option<String>

Authority genesis nonce so invite-joined peers reconstruct the same GroupGenesis payload, not just the same stable group id.

inviter: String

Agent ID of the inviter (hex-encoded).

invite_secret: String

One-time invite secret (32 bytes, hex-encoded). Used to authenticate the join handshake.

created_at: u64

Unix seconds when this invite was created.

expires_at: u64

Unix seconds when this invite expires (0 = never).

signature: String

Optional future-facing ML-DSA-65 signature over the invite fields (hex-encoded). Currently not validated by the join flow.

Implementations

impl SignedInvite

pub fn new( group_id: String, group_name: String, inviter: &AgentId, expiry_secs: u64, ) -> Self

Create a new invite (without signature — call sign() separately).

Arguments

• group_id - MLS group ID (hex).
• group_name - Human-readable group name.
• inviter - Inviter’s agent ID.
• expiry_secs - Seconds until expiry (0 = never).

pub fn signable_bytes(&self) -> Vec<u8>

Get the canonical bytes that would be signed if invite signatures are enforced in the future.

pub fn is_expired(&self) -> bool

Check if this invite has expired.

pub fn is_signed(&self) -> bool

Check if the signature field is populated.

pub fn to_link(&self) -> String

Encode this invite as a shareable link.

Format: x0x://invite/<base64url(json)>

pub fn from_link(link: &str) -> Result<Self, String>

Parse an invite from a link string.

Accepts both x0x://invite/<base64> and raw <base64> formats.

Errors

Returns an error if the link is malformed or the invite can’t be deserialized.

Trait Implementations

impl Clone for SignedInvite

fn clone(&self) -> SignedInvite

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SignedInvite

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for SignedInvite

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for SignedInvite

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.