feat(protocol): bind tunnel admission to device proof

gen/rust/protocol.rs

@@ -1,6 +1,6 @@
 // Code generated by tools/generate.py; DO NOT EDIT.
 #![allow(non_snake_case)]
-pub const SCHEMA_SHA256: &str = "b8a69785112bb94d45f47c2250ca59d0bde47e3667b8ad89c9b0e2c4cfb25aec";
+pub const SCHEMA_SHA256: &str = "6b8631bf2b2aa12b14d0bc4d136af39a632e85b3237dc5614469ba09d93f5fca";
 pub const CURRENT_WIRE_VERSION: &str = "1";
 pub const N_MINUS_1_WIRE_VERSION: &str = "0";
 pub const N_MINUS_2_WIRE_VERSION: &str = "-1";
@@ -1345,12 +1345,13 @@ pub struct TunnelAdmissionRequest {
     grant: String,
     reconnectSequence: i64,
     clientNonce: String,
+    deviceSignature: String,
     capabilities: CapabilityProfile,
 }
 
 impl TunnelAdmissionRequest {
-    pub fn new(version: String, sessionId: String, gatewayId: String, audience: String, grant: String, reconnectSequence: i64, clientNonce: String, capabilities: CapabilityProfile) -> Result<Self, ValidationError> {
-        let value = Self { version, sessionId, gatewayId, audience, grant, reconnectSequence, clientNonce, capabilities };
+    pub fn new(version: String, sessionId: String, gatewayId: String, audience: String, grant: String, reconnectSequence: i64, clientNonce: String, deviceSignature: String, capabilities: CapabilityProfile) -> Result<Self, ValidationError> {
+        let value = Self { version, sessionId, gatewayId, audience, grant, reconnectSequence, clientNonce, deviceSignature, capabilities };
         value.validate()?;
         Ok(value)
     }
@@ -1372,6 +1373,9 @@ impl TunnelAdmissionRequest {
         if self.clientNonce.is_empty() { return Err(ValidationError::new("client_nonce", "required")); }
         if !self.clientNonce.is_empty() && self.clientNonce.len() < 16 { return Err(ValidationError::new("client_nonce", "min_length")); }
         if self.clientNonce.len() > 128 { return Err(ValidationError::new("client_nonce", "max_length")); }
+        if self.deviceSignature.is_empty() { return Err(ValidationError::new("device_signature", "required")); }
+        if !self.deviceSignature.is_empty() && self.deviceSignature.len() < 86 { return Err(ValidationError::new("device_signature", "min_length")); }
+        if self.deviceSignature.len() > 86 { return Err(ValidationError::new("device_signature", "max_length")); }
         self.capabilities.validate().map_err(|_| ValidationError::new("capabilities", "invalid_object"))?;
         Ok(())
     }
@@ -1382,7 +1386,15 @@ impl TunnelAdmissionRequest {
     pub fn grant(&self) -> &String { &self.grant }
     pub fn reconnectSequence(&self) -> &i64 { &self.reconnectSequence }
     pub fn clientNonce(&self) -> &String { &self.clientNonce }
+    pub fn deviceSignature(&self) -> &String { &self.deviceSignature }
     pub fn capabilities(&self) -> &CapabilityProfile { &self.capabilities }
+    pub fn device_admission_transcript(&self) -> Vec<u8> {
+        let reconnect_sequence = self.reconnectSequence.to_string();
+        let fields = [&self.sessionId, &self.gatewayId, &self.audience, &self.grant, &reconnect_sequence, &self.clientNonce, &self.capabilities.transport, &self.capabilities.framing, &self.capabilities.media, &self.capabilities.audio, &self.capabilities.sourceRateControl, &self.capabilities.clientDecode];
+        let mut transcript = String::from("versevdi/tunnel-admission/v1");
+        for field in fields { transcript.push_str(&format!("{}:{}", field.as_bytes().len(), field)); }
+        transcript.into_bytes()
+    }
 }
 
 #[derive(Debug, Clone, PartialEq, Eq)]