INNER CODE UNIT · Rust

authorization_context_is_separate_from_subject_identity

AChep/keyguard-app · commonAgent/src/lib.rs:311

    fn authorization_context_is_separate_from_subject_identity() {
        let subject = SubjectFingerprint::derive(b"test-subject-v1", b"application")
            .expect("valid subject fingerprint");
        let first =
            AuthorizationContextFingerprint::derive(b"host-a").expect("valid context fingerprint");
        let second =
            AuthorizationContextFingerprint::derive(b"host-b").expect("valid context fingerprint");

        assert_ne!(first, second);
        assert_ne!(first.as_bytes(), subject.as_bytes());
        assert!(matches!(
            AuthorizationContextFingerprint::derive(b""),
            Err(IdentityError::EmptyAuthorizationContext)
        ));
    }

    #[test]
    fn verified_subject_carries_its_kind() {

View source record →