Struct SignedUrlVerifier 

pub struct SignedUrlVerifier { /* private fields */ }

A signed URL verifier (DW-109).

Built from a route’s SignedUrlConfig at snapshot compile time. The verifier holds the HMAC secret and the query parameter name. The SignedUrlVerifier::verify method extracts the signature and expiry from the query string, recomputes the HMAC, and checks the expiry.

Implementations

impl SignedUrlVerifier

pub fn from_config(config: &SignedUrlConfig) -> Result<Self, SignedUrlError>

Build a verifier from a SignedUrlConfig. Returns an error if the config is invalid (empty secret, empty query_param).

pub fn query_param(&self) -> &str

The query parameter name this verifier looks for.

pub fn verify( &self, method: &str, path: &str, query: &str, now: u64, client_ip: &str, ) -> SignedUrlResult

Verify a signed URL request. Extracts the signature and expiry from the query string, recomputes the HMAC-SHA256 over the canonical request (method, path, expires), and checks the expiry.

• method: the uppercase HTTP method (e.g. “GET”).
• path: the request path (without query string).
• query: the raw query string (e.g. “foo=bar&sig=abc&expires=123”).
• now: the current Unix epoch seconds.
• client_ip: the client’s IP address (used when bind_client_ip is true; pass an empty string to skip).

Returns SignedUrlResult::Valid if the signature matches and the URL has not expired; SignedUrlResult::Invalid if the signature is missing or does not match; SignedUrlResult::Expired if the URL has expired; SignedUrlResult::NonceError if the nonce is missing or replayed (SEC-07, #211).

pub fn sign( &self, method: &str, path: &str, expires: u64, client_ip: &str, nonce: Option<&str>, ) -> Result<String, SignedUrlError>

Mint a signed URL query string for the given request. This is the counterpart to verify: an external URL minter (or a test) uses it to produce a valid signature.

• method: the uppercase HTTP method.
• path: the request path (without query string).
• expires: the Unix epoch seconds at which the URL expires.
• client_ip: the client’s IP address (used when bind_client_ip is true; pass an empty string to skip).
• nonce: an optional nonce (used when require_nonce is true; the caller generates a unique nonce per URL).

Returns the query string with the signature, expiry, and optional nonce parameters.

Trait Implementations

impl Debug for SignedUrlVerifier

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.