Function mint

atomic-canonical/src/delegation.rs:104–130

Mint a signed delegation certificate. The delegator's keypair signs; the returned value is the complete document, including `contentHash` and `proof`. Persist and transmit these exact bytes — re-serializing a parsed struct risks producing different bytes than the proof covers.

(delegator: &Identity, delegator_key: &KeyPair, terms: &Delegation)

/// — re-serializing a parsed struct risks producing different bytes than the
/// proof covers.
pub fn mint(delegator: &Identity, delegator_key: &KeyPair, terms: &Delegation) -> Value {
    let mut doc = Map::new();
    doc.insert("@context".into(), json!(CONTEXT_URL));
    doc.insert("@type".into(), json!(TYPE_DELEGATION));
    doc.insert("@id".into(), json!(terms.id.to_urn()));

    doc.insert("delegator".into(), json!(terms.delegator));
    doc.insert("delegatorKey".into(), json!(terms.delegator_key));
    doc.insert("delegatorName".into(), json!(terms.delegator_name));
    doc.insert("delegate".into(), json!(terms.delegate));
    doc.insert("delegateKey".into(), json!(terms.delegate_key));
    doc.insert("delegateName".into(), json!(terms.delegate_name));
    if let Some(agent) = &terms.software_agent {
        doc.insert("softwareAgent".into(), json!(agent));
    }

    doc.insert(
        "scope".into(),
        serde_json::to_value(&terms.scope).expect("scope serialization is infallible"),
    );
    doc.insert("issued".into(), json!(rfc3339(terms.issued)));
    if let Some(expires) = terms.expires {
        doc.insert("expires".into(), json!(rfc3339(expires)));
    }

    proof::attest_value(Value::Object(doc), delegator, delegator_key)
}

/// Verify a certificate against the delegator's public key and return the
/// typed view.