Struct CatalystRBACTokenV1

pub(crate) struct CatalystRBACTokenV1 {
    pub(crate) kid: Kid,
    pub(crate) ulid: Ulid,
    pub(crate) sig: SignatureEd25519,
    raw: Vec<u8>,
}

A Catalyst RBAC Authorization Token.

Fields

kid: Kid

Token Key Identifier

ulid: Ulid

Tokens ULID (Time and Random Nonce)

sig: SignatureEd25519

Ed25519 Signature of the Token

raw: Vec<u8>

Raw bytes of the token

Implementations

impl CatalystRBACTokenV1

const AUTH_TOKEN_PREFIX: &str = "catv1"

Bearer Token prefix for this token.

const KID_ULID_CBOR_ENCODED_BYTES: u8 = 34u8

The message is a Cbor sequence (cbor(kid) + cbor(ulid)): kid + ulid are 16 bytes a piece, with 1 byte extra due to cbor encoding, The two fields include their encoding resulting in 17 bytes each.

pub(crate) fn new(sk: &SigningKey) -> Self

The Encoded Binary Auth Token is a [CBOR sequence] that consists of 3 fields [ kid, ulid, signature ]. ED25519 Signature over the preceding two fields - sig(cbor(kid), cbor(ulid))

pub(crate) fn decode(auth_token: &str) -> Result<Self>

Decode base64 cbor encoded auth token into constituent parts of (kid, ulid, signature) e.g catv1.UAARIjNEVWZ3iJmqu8zd7v9QAZEs7HHPLEwUpV1VhdlNe1hAAAAAAAAAAAAA…

pub(crate) fn verify(&self, public_key: &VerifyingKey) -> Result<()>

Given the PublicKey, verify the token was correctly signed.

pub(crate) fn is_young(&self, max_age: Duration, max_skew: Duration) -> bool

Check if the token is young enough. Old tokens are no longer valid.

Trait Implementations

impl Clone for CatalystRBACTokenV1

fn clone(&self) -> CatalystRBACTokenV1

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CatalystRBACTokenV1

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for CatalystRBACTokenV1

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.