Struct SdJwt 

pub struct SdJwt { /* private fields */ }

A parsed SD-JWT presentation.

Keeps the exact strings it was parsed from alongside the decoded values. Spec §6.1 binds each layer to “the serialized form as received”, so re-encoding from the decoded header and payload would not reproduce the bytes a binding covers.

Implementations

impl SdJwt

pub fn parse(serialized: &str) -> Result<SdJwt, ViError>

Parse a serialized SD-JWT, decoding the JWT segments and every disclosure.

pub fn issuer_jwt(&self) -> &str

The issuer-signed JWT, exactly as received.

pub fn header(&self) -> &Value

The decoded JWT header.

pub fn payload(&self) -> &Value

The decoded JWT payload, before any disclosure is resolved into it.

pub fn signature(&self) -> &[u8]

The raw ES256 signature bytes.

pub fn disclosures(&self) -> &[String]

The presented disclosures, in the order they were received.

pub fn disclosure_values(&self) -> &[Disclosure]

The decoded disclosures, positionally matching Self::disclosures.

pub fn key_binding_jwt(&self) -> Option<&str>

The key-binding JWT, when the presentation carried one.

pub fn serialize(&self) -> String

Re-serialize exactly what was parsed, key-binding JWT included.

pub fn presentation(&self) -> String

The presentation a hash binding covers: every disclosure, a trailing ~, and no key-binding JWT.

§6.1 computes sd_hash over the SD-JWT excluding the KB-JWT, so this is a named operation rather than a convention a caller has to remember.

pub fn selective_presentation( &self, indices: &[usize], ) -> Result<String, ViError>

The presentation containing only the disclosures at indices.

§5.4 and §6.1.2: an L3 binds to the L2 subset forwarded to its own recipient, not to everything the agent holds.

pub fn resolve_disclosures(&self) -> Result<Map<String, Value>, ViError>

Resolve the presented disclosures into the payload’s claim set.

Two separate rules, matching the reference:

• Object-property disclosures resolve only when their hash appears in _sd. An array-element disclosure listed there resolves to nothing, because it has no name to bind to.
• delegate_payload references resolve against every presented disclosure, ungated by _sd. A reference whose disclosure is absent stays a {"...": "<hash>"} object so the caller can tell resolved from unresolved.

Nested references inside constraint objects are deliberately left alone; the reference does not recurse into them either.

Trait Implementations

impl Clone for SdJwt

fn clone(&self) -> SdJwt

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SdJwt

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Eq for SdJwt

impl PartialEq for SdJwt

fn eq(&self, other: &SdJwt) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for SdJwt