Struct SyncRequestAuth 

pub struct SyncRequestAuth {
    pub key: PublicKey,
    pub timestamp_ms: u64,
    pub nonce: Vec<u8>,
    pub signature: Vec<u8>,
}

A caller’s proof of key possession for one sync request.

The signature covers the responding server, the tree, the claimed tips, and a timestamp/nonce pair, so a captured request cannot be replayed to the same server, redirected to a different one, or reused for a different tree.

What this does not defend against

This authenticates the requester to the server; it does not protect the channel. Over a plaintext transport an attacker on the network path still reads the served entries and can relay a live signed request to keep the response for itself. Confidentiality against a network attacker requires an encrypted transport (Iroh’s QUIC), not this signature.

Fields

key: PublicKey

The key whose authority the caller is claiming on the tree.

timestamp_ms: u64

Milliseconds since the Unix epoch, from the caller’s clock.

nonce: Vec<u8>

Random per-request value; makes each signature single-use.

signature: Vec<u8>

Signature over SyncRequestAuth::signing_bytes.

Implementations

impl SyncRequestAuth

pub fn sign( signing_key: &PrivateKey, server_pubkey: &PublicKey, tree_id: &ID, tips: &Snapshot, timestamp_ms: u64, ) -> Self

Sign a request to server_pubkey for tree_id at tips.

pub fn verify( &self, server_pubkey: &PublicKey, tree_id: &ID, tips: &Snapshot, ) -> Result<(), AuthError>

Verify the signature against the request it claims to cover.

Freshness and single-use are the caller’s responsibility — a valid signature says nothing about when it was made.

Trait Implementations

impl Clone for SyncRequestAuth

fn clone(&self) -> SyncRequestAuth

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SyncRequestAuth

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for SyncRequestAuth

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for SyncRequestAuth

fn eq(&self, other: &SyncRequestAuth) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for SyncRequestAuth

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for SyncRequestAuth