BoundedAuthorityProtocol.RoleAttestation.V1.AttestationFacts (Bounded Authority Protocol v1.0.0)

Copy Markdown View Source

Closed value-bearing, redacted, non-authorizing verified role-attestation facts.

Fields

  • version - always 1.
  • attestor_key_id - the verified attestor key identifier.
  • attestor_key_fingerprint - the raw 32-byte RFC 7638 fingerprint of the attestor key.
  • subject_key_id - the verified subject key identifier.
  • subject_key_fingerprint - the raw 32-byte RFC 7638 fingerprint of the subject key.
  • role - the attested role, "issuer" or "holder".
  • jti - the attestation identifier.
  • nbf - the start of the window, integer Unix time in seconds.
  • exp - the exclusive end of the window, integer Unix time in seconds.
  • verification - always :signature_and_window.
  • trust - always :not_evaluated.

Summary

Types

t()

Facts from a verified role attestation.

Types

t()

@type t() :: %BoundedAuthorityProtocol.RoleAttestation.V1.AttestationFacts{
  attestor_key_fingerprint: binary(),
  attestor_key_id: binary(),
  exp: integer(),
  jti: binary(),
  nbf: integer(),
  role: binary(),
  subject_key_fingerprint: binary(),
  subject_key_id: binary(),
  trust: :not_evaluated,
  verification: :signature_and_window,
  version: 1
}

Facts from a verified role attestation.