Struct CoseEnvelopeBuilder 

pub struct CoseEnvelopeBuilder { /* private fields */ }

Configuration for a CoseEnvelope; see CoseEnvelope::server and CoseEnvelope::client. Nothing is checked until build.

Implementations

impl CoseEnvelopeBuilder

pub fn skew(self, skew: Duration) -> CoseEnvelopeBuilder

How far iat may be from the opener’s clock, either way. Default 300 s. Sub-second parts are ignored.

It also sets how long a (kid, cti) stays in the nonce store: 2·skew + 1 seconds past iat (the second skew covers clock disagreement between replicas and the store; see replay.rs), so the store’s working set is every request of the last 2·skew + 1 seconds. build refuses a skew so large that this expiry would leave the representable time range.

pub fn clock( self, clock: impl Fn() -> i64 + Send + Sync + 'static, ) -> CoseEnvelopeBuilder

The clock iat is read from when sealing and checked against when opening, in Unix seconds. Default: the system clock through chrono (which, unlike SystemTime, works on wasm32-unknown-unknown). Injectable so tests and the shared vectors can pin iat. A reading before 1970 makes sealing a request fail with a 500.

pub fn cti_source( self, cti: impl Fn() -> Result<Vec<u8>, CratestackError> + Send + Sync + 'static, ) -> CoseEnvelopeBuilder

Where a request’s cti comes from. Default: 16 bytes from the operating system’s CSPRNG (§5, nonce mode). Injectable so the shared vectors can pin cti, in both the 16-byte and the 2-byte counter shape. It must return 1 to 4 or 16 bytes; anything else, or an Err, makes sealing fail with a 500.

pub fn nonce_source( self, nonce: impl Fn() -> Result<[u8; 16], CratestackError> + Send + Sync + 'static, ) -> CoseEnvelopeBuilder

Where CoseEnvelope::request_nonce gets its 16 bytes. Default: the operating system’s CSPRNG. Injectable for tests and vectors.

pub fn nonce_store(self, store: Arc<dyn NonceStore>) -> CoseEnvelopeBuilder

A nonce store for a client envelope that also opens requests through CoseEnvelope::open_request (a relay, or a test).

pub fn build(self) -> Result<CoseEnvelope, CratestackError>

Check the configuration. Fails with CratestackError::Validation when the signer’s algorithm belongs to the other mode, its kid is not 8 bytes, or the skew is so large that a nonce’s expiry (iat + 2·skew + 1, for any iat the opener could accept within the next thousand years) would not be a representable time. Without that last check such an envelope would build, and then answer every valid request with a 401.

Trait Implementations

impl Debug for CoseEnvelopeBuilder

Shows the configuration, not the key material: signers expose only their algorithm and kid, and the injected closures are opaque.

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.