Struct Invitation 

pub struct Invitation { /* private fields */ }

A signed endpoint-targeted domain bootstrap payload.

Implementations

impl Invitation

pub fn issue( descriptor: DomainDescriptor, chain: Vec<CapabilityCertificate>, seed: DomainSeed, subject: AuthorId, issuer: &IrohSigner, ) -> Result<Self, InvitationError>

Issues a signed invitation containing a validated least-privilege chain and epoch key.

pub fn issue_at_checkpoint( descriptor: DomainDescriptor, chain: Vec<CapabilityCertificate>, controller_chain: Vec<CapabilityCertificate>, seed: DomainSeed, head: Option<ControlTransition>, subject_revocations: Vec<(AuthorId, u64)>, issuer_capability: CapabilityId, subject: AuthorId, issuer: &IrohSigner, ) -> Result<Self, InvitationError>

Issues a current-epoch invitation carrying a signed compact authority baseline.

pub fn issue_at_checkpoint_with_evidence( descriptor: DomainDescriptor, chain: Vec<CapabilityCertificate>, controller_chain: Vec<CapabilityCertificate>, active_chains: &[Vec<CapabilityCertificate>], seed: DomainSeed, head: Option<ControlTransition>, subject_revocations: Vec<(AuthorId, u64)>, issuer_capability: CapabilityId, subject: AuthorId, issuer: &IrohSigner, ) -> Result<Self, InvitationError>

Issues a checkpoint with complete evidence for the domain’s active members.

pub const fn subject(&self) -> AuthorId

Returns the target endpoint that alone may import this invitation.

pub const fn issuer(&self) -> AuthorId

pub const fn descriptor(&self) -> &DomainDescriptor

Returns the signed immutable domain descriptor.

pub fn capability_chain(&self) -> &[CapabilityCertificate]

Returns the validated root-to-leaf capability chain.

pub fn controller_chain(&self) -> &[CapabilityCertificate]

pub fn authority_evidence(&self) -> &[CapabilityCertificate]

pub const fn authority_checkpoint(&self) -> &AuthorityCheckpoint

pub fn domain_seed(&self) -> DomainSeed

Exports the sensitive current epoch seed for the targeted key-vault import path.

pub fn encode_canonical(&self) -> Result<Vec<u8>, InvitationError>

Strictly encodes the signed online invitation payload.

pub fn decode_canonical(bytes: &[u8]) -> Result<Self, InvitationError>

Strictly decodes and validates a signed invitation.

pub fn seal_offline( &self, ) -> Result<(InvitationTicket, InvitationSecret), InvitationError>

Encrypts this invitation into an offline ticket and returns its one-time bearer secret.

Trait Implementations

impl Clone for Invitation

fn clone(&self) -> Invitation

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Invitation

fn fmt(&self, formatter: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.