GoogleApi.BinaryAuthorization.V1.Model.AttestationAuthenticator (google_api_binary_authorization v0.18.0)

View Source

An attestation authenticator that will be used to verify attestations. Typically this is just a set of public keys. Conceptually, an authenticator can be treated as always returning either "authenticated" or "not authenticated" when presented with a signed attestation (almost always assumed to be a DSSE attestation). The details of how an authenticator makes this decision are specific to the type of 'authenticator' that this message wraps.

Attributes

  • displayName (type: String.t, default: nil) - Optional. A user-provided name for this AttestationAuthenticator. This field has no effect on the policy evaluation behavior except to improve readability of messages in evaluation results.
  • pkixPublicKeySet (type: GoogleApi.BinaryAuthorization.V1.Model.PkixPublicKeySet.t, default: nil) - Optional. A set of raw PKIX SubjectPublicKeyInfo format public keys. If any public key in the set validates the attestation signature, then the signature is considered authenticated (i.e. any one key is sufficient to authenticate).

Summary

Types

t()

Functions

decode(value, options)

Unwrap a decoded JSON object into its complex fields.

Types

t()

@type t() :: %GoogleApi.BinaryAuthorization.V1.Model.AttestationAuthenticator{
  displayName: String.t() | nil,
  pkixPublicKeySet:
    GoogleApi.BinaryAuthorization.V1.Model.PkixPublicKeySet.t() | nil
}

Functions

decode(value, options)

@spec decode(struct(), keyword()) :: struct()

Unwrap a decoded JSON object into its complex fields.