Struct Opened 

#[non_exhaustive]
pub struct Opened {
    pub payload: Bytes,
    pub kid: [u8; 8],
    pub alg: CoseAlg,
    pub thumbprint: [u8; 32],
    pub iat: Option<u64>,
    pub cti: Option<Bytes>,
}

A message that verified.

This is the typed result behind CratestackEnvelope::open: the axum layer (cratestack#1006) runs before any CratestackContext exists, so it needs the verified facts as values rather than as a side effect on a context. payload and cti are zero-copy slices of the received body; kid is a copy, so a caller that keeps only the signer’s identity does not keep the body alive.

Debug prints the payload’s length, not its bytes: a verified body is application data (a payment, a token), and {:?} on a result is how it would otherwise end up in a log.

#[non_exhaustive] so the auth feature can add the device or service id a resolver maps the key to without a breaking change.

Fields (Non-exhaustive)

Non-exhaustive structs could have additional fields added in future. Therefore, non-exhaustive structs cannot be constructed in external crates using the traditional Struct { .. } syntax; cannot be matched against without a wildcard ..; and struct update syntax will not work.

payload: Bytes

The payload, exactly as signed, for codec.decode.

kid: [u8; 8]

The kid from the protected header. It is the verifying key’s own kid: a candidate whose kid differs is never tried.

alg: CoseAlg

The algorithm the message was verified with.

thumbprint: [u8; 32]

The RFC 9679 thumbprint of the key that verified. Two keys can share a kid (8 bytes collide at about 2³² keys; tests/replay.rs uses a real pair), so this, not the kid, identifies the signer unambiguously; a principal derived from a verified message should use it. The trait path records it as the context’s VerifiedSigner::thumbprint, the same name.

iat: Option<u64>

iat, seconds. Some for a request, None for a response.

cti: Option<Bytes>

cti. Some for a request, None for a response.

Trait Implementations

impl Clone for Opened

fn clone(&self) -> Opened

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Opened

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Eq for Opened

impl PartialEq for Opened

fn eq(&self, other: &Opened) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for Opened