Struct SignedIdentity 

pub struct SignedIdentity { /* private fields */ }

A credential signed with a secret this process holds.

The credential is <payload>.<mac>, where payload is actor;expiry_millis;key=value;key=value… and mac is a keyed BLAKE3 of it under the shared secret, hex-encoded. Verification is a constant-time comparison of the recomputed tag.

This is a symmetric scheme, and its limits are the point of writing them here. It suits a gateway that mints credentials for a Beck process behind it — the shape a rung-1 deployment actually has — and it does not suit a public identity provider, because everything that can verify a credential can also mint one. An asymmetric verifier is D6’s OIDC work and needs a signature library (48 §48.13).

BLAKE3’s keyed mode is a MAC by construction and is already in this workspace’s dependency graph, so this costs no new dependency and no hand-rolled cryptography — the two ways a module like this usually goes wrong.

Implementations

impl SignedIdentity

pub fn new(secret: &str, clock: Arc<dyn Clock>) -> SignedIdentity

A verifier for a shared secret of any length, stretched to BLAKE3’s key size by its own derivation function rather than by truncation or padding.

pub fn mint( &self, actor: &str, expires_at_millis: i64, claims: &[(&str, &str)], ) -> String

Mint a credential. Present so a test, a gateway written in Beck, or beck run --auth can produce one — and so the format has exactly one implementation rather than a description.

Trait Implementations

impl Debug for SignedIdentity

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Identity for SignedIdentity

fn verify(&self, claim: &str) -> Result<Actor, Rejected>

Verify what a client said about itself.

fn kind(&self) -> &'static str

What this provider is, for the dashboard and for the startup line. An operator who cannot tell from the logs whether authentication is on does not have authentication.

fn verifies(&self) -> bool

Whether this provider verifies anything at all.

fn login(&self) -> Option<&RelyingParty>

The browser-facing half, for a provider that can run a login flow.