Struct EncodedPostBundleV1 

pub struct EncodedPostBundleV1 {
    pub header: EncodedPostBundleHeaderV1,
    pub encoded_posts_bytes: Bytes,
}

Fields

header: EncodedPostBundleHeaderV1

encoded_posts_bytes: Bytes

Implementations

impl EncodedPostBundleV1

pub fn to_bytes(&self) -> Result<Bytes>

pub fn from_bytes(bytes: Bytes, decode_body: bool) -> Result<Self>

pub fn verify(&self, base_id: &Id) -> Result<()>

Verifies that this bundle is legitimate enough to cache.

Checks:

1. The bundle header is structurally valid and its signature verifies.
2. The sum of encoded_post_lengths exactly spans encoded_posts_bytes, and the plaintext post_id prefix of each slice matches the corresponding entry in encoded_post_ids.
3. Each post slice can be decrypted using base_id, which also verifies the per-post signature and hash integrity.

pub fn verify_for_bucket( &self, bucket_location: &BucketLocation, time_millis_now: TimeMillis, ) -> Result<()>

Verifies that this bundle is a legitimate bundle for bucket_location, as received from the network.

On top of EncodedPostBundleV1::verify:

1. The publishing peer is a genuine server identity (server-id PoW, id derived from its key, self-signed). EncodedPostBundleHeaderV1::verify alone only checks the header against the key the header itself supplies.
2. The bundle is for this bucket’s location_id.
3. No post appears twice.
4. The header timestamp is plausible: not before the bucket starts and not in the future (both allowing for clock drift).
5. Every post could legitimately have been admitted into this bucket - see EncodedPostV1::check_admissible_to_bucket.

An empty bundle can pass: whether an empty bundle is acceptable is up to the caller. The sealed / overflowed flags are not checked here - see EncodedPostBundleV1::normalise_flags_for_bucket.

pub fn normalise_flags_for_bucket( &mut self, bucket_location: &BucketLocation, time_millis_now: TimeMillis, )

Replaces the publisher-asserted overflowed / sealed flags with values the receiver can stand behind:

• a bundle holding more posts than the overflow threshold is overflowed, whatever it says,
• sealed is recomputed from the bucket and the (already bounds-checked) header timestamp, as the server would have.

This deliberately normalises rather than rejects: the posts in such a bundle are still genuine, and older servers can legitimately produce inconsistent flags (e.g. by healing posts in without recomputing them). The header timestamp is clamped to time_millis_now: verify_for_bucket tolerates it being up to a clock drift in our future, which must not let a publisher seal its bundle (and so pin it in caches with no expiry) before the bucket has really sealed. NB: the header signature no longer covers the flags after this, so only use the result locally - never forward it.

impl EncodedPostBundleV1

pub fn stub() -> Self

Trait Implementations

impl Clone for EncodedPostBundleV1

fn clone(&self) -> EncodedPostBundleV1

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for EncodedPostBundleV1

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for EncodedPostBundleV1

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for EncodedPostBundleV1

fn eq(&self, other: &EncodedPostBundleV1) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for EncodedPostBundleV1