verify

Documentation

Overview

Package verify provides signature verification types and logic (Fetcher, VerifyWithFetcher).

Index

• type Fetcher
• type PerSignatureResult
  • func VerifyWithFetcher(ctx context.Context, req *signv1.VerifyRequest, fetcher Fetcher) (*signv1.VerifyResponse, []PerSignatureResult, error)

Types

type Fetcher

type Fetcher interface {
	PullSignatures(ctx context.Context, recordRef *corev1.RecordRef) ([]*signv1.Signature, error)
	PullPublicKeys(ctx context.Context, recordRef *corev1.RecordRef) ([]string, error)
}

Fetcher supplies signatures and public keys for a record.

type PerSignatureResult

type PerSignatureResult struct {
	SignerKey  string
	Status     string // "verified" or "failed"
	SignerInfo *signv1.SignerInfo
}

PerSignatureResult is the verification result for one signer (for DB cache).

func VerifyWithFetcher

func VerifyWithFetcher(ctx context.Context, req *signv1.VerifyRequest, fetcher Fetcher) (*signv1.VerifyResponse, []PerSignatureResult, error)

VerifyWithFetcher runs signature verification using the given fetcher and returns the response plus per-signature results. Used by Client.Verify (with the client as Fetcher) and by the reconciler (with a store Fetcher).