Struct VerifyContext 

pub struct VerifyContext<'a> { /* private fields */ }

Verification builder/configuration.

Implementations

impl<'a> VerifyContext<'a>

pub fn new() -> Self

Create a context with conservative defaults.

Defaults:

• no pre-set key, no key resolver
• manifests disabled
• same-document URIs only
• all transforms allowed
• pre-digest buffers not stored

pub fn key(self, key: &'a dyn VerifyingKey) -> Self

Set a pre-resolved verification key.

pub fn key_resolver(self, resolver: &'a dyn KeyResolver) -> Self

Set a key resolver fallback used when key() is not provided.

pub fn process_manifests(self, enabled: bool) -> Self

Enable or disable <Manifest> processing.

Note: manifest verification is not implemented yet. When enabled, the verifier fails closed with ManifestProcessingUnsupported if a <ds:Manifest> is present under <ds:Object> or if a <Reference Type="http://www.w3.org/2000/09/xmldsig#Manifest"> is present.

pub fn allowed_uri_types(self, types: UriTypeSet) -> Self

Restrict allowed reference URI classes.

pub fn allowed_transforms<I, S>(self, transforms: I) -> Self

where I: IntoIterator<Item = S>, S: Into<String>,

Restrict allowed transform algorithms by URI.

Example values:

• http://www.w3.org/2000/09/xmldsig#enveloped-signature
• http://www.w3.org/2001/10/xml-exc-c14n#

When a <Reference> has no explicit canonicalization transform, XMLDSig applies implicit default C14N (http://www.w3.org/TR/2001/REC-xml-c14n-20010315). If an allowlist is configured, include that URI as well unless all references use explicit Transform::C14n(...).

pub fn store_pre_digest(self, enabled: bool) -> Self

Store pre-digest buffers for diagnostics.

pub fn verify( &self, xml: &str, ) -> Result<VerifyResult, SignatureVerificationPipelineError>

Verify one XMLDSig signature using this context.

Returns Ok(VerifyResult) for both valid and invalid signatures; inspect VerifyResult::status for the verification outcome. Err(...) is reserved for pipeline failures.

Trait Implementations

impl Default for VerifyContext<'_>

fn default() -> Self

Returns the “default value” for a type.