0.1.0-alpha03

identity/com.midnight.kuira.core.identity.auth/AuthorizationRecord

AuthorizationRecord

class AuthorizationRecord(val id: String, val did: String, val credentialId: String, val payload: ByteArray, val authenticatorData: ByteArray, val clientDataJson: ByteArray, val signature: ByteArray, val accessKeyPath: String, val label: String, val revoked: Boolean = false, val createdAtMs: Long, val revokedAtMs: Long? = null)

A stored authorization record linking a root identity to an access key.

This is the persistent form of a keyAuthorization — saved after the passkey signs the delegation payload during the CredentialManager ceremony.

The record is self-verifiable: anyone with the root public key can check the WebAuthn signature against the payload without trusting a server.

Constructors

AuthorizationRecord

constructor(id: String, did: String, credentialId: String, payload: ByteArray, authenticatorData: ByteArray, clientDataJson: ByteArray, signature: ByteArray, accessKeyPath: String, label: String, revoked: Boolean = false, createdAtMs: Long, revokedAtMs: Long? = null)

Properties

val accessKeyPath: String

HD derivation path of the access key (e.g., "m/44'/2400'/0'/5/0").

authenticatorData

val authenticatorData: ByteArray

WebAuthn authenticator data from the assertion ceremony.

val clientDataJson: ByteArray

WebAuthn client data JSON from the assertion ceremony.

val createdAtMs: Long

When the record was created (epoch millis).

val credentialId: String

Credential ID from the passkey registration.

val did: String

The user's DID (did:key:z...) derived from the root passkey.

Unique identifier for this record.

val label: String

Label for identifying this authorization (e.g., dApp name, "default").

val payload: ByteArray

The authorization payload (99 bytes, contains root+access keys, scope, timestamps).

val revoked: Boolean = false

Whether this authorization has been revoked.

val revokedAtMs: Long? = null

When the record was revoked (epoch millis), or null if active.

val signature: ByteArray

ECDSA P-256 signature from the passkey over the assertion data.

Functions

open operator override fun equals(other: Any?): Boolean

open override fun hashCode(): Int

fun parsePayload(): AuthorizationPayload

Parse the embedded authorization payload.

open override fun toString(): String