Method VerifyDownload

internal/httpapi/attachments.go:44–44

VerifyDownload reports whether `token` authorizes downloading attachment `index` of `messageID` (and is unexpired). Identity is NOT in the token; the download handler additionally binds the message to the path agent.

(token, messageID string, index int)

	// `index` of `messageID` (and is unexpired). Identity is NOT in the token;
	// the download handler additionally binds the message to the path agent.
	VerifyDownload(token, messageID string, index int) bool
}

// nativeAttachmentStore mints capability tokens with the deployment HMAC secret