Function parse

atomic-canonical/src/delegation.rs:198–228

Parse a certificate into its typed view **without** verifying the proof. For displaying a document whose trust has not been established, or that is about to be verified by a caller that already holds the key. Never make an authorization decision on the result of this function alone.

(document: &Value)

/// about to be verified by a caller that already holds the key. Never make an
/// authorization decision on the result of this function alone.
pub fn parse(document: &Value) -> Result<Delegation> {
    expect_type(document, TYPE_DELEGATION)?;
    let obj = as_object(document)?;

    let id_urn = string_field(obj, "@id")?;
    let id = DelegationId::from_base32(&id_urn)
        .ok_or_else(|| CanonicalError::Proof(format!("malformed delegation @id: {id_urn}")))?;

    let scope = obj
        .get("scope")
        .ok_or_else(|| CanonicalError::Proof("delegation carries no scope".into()))?;
    let scope = serde_json::from_value(scope.clone())
        .map_err(|e| CanonicalError::Proof(format!("malformed delegation scope: {e}")))?;

    Ok(Delegation {
        id,
        delegator: string_field(obj, "delegator")?,
        delegator_key: string_field(obj, "delegatorKey")?,
        delegator_name: string_field(obj, "delegatorName")?,
        delegate: string_field(obj, "delegate")?,
        delegate_key: string_field(obj, "delegateKey")?,
        delegate_name: string_field(obj, "delegateName")?,
        software_agent: obj
            .get("softwareAgent")
            .and_then(Value::as_str)
            .map(str::to_string),
        scope,
        issued: timestamp_field(obj, "issued")?,
        expires: optional_timestamp_field(obj, "expires")?,
    })
}

/// Recover the delegate's Ed25519 public key from a parsed certificate.
///