kuilt-otel-tap/us.tractat.kuilt.otel.tap/LogTapAdmission/Verify

Verify

class Verify(val token: LogTapJoinToken, val clock: Clock, val random: Random) : LogTapAdmission

Offering side: challenge joiners and admit only those whose proof matches HMAC-SHA256(token.code, nonce) while token is valid.

random MUST be cryptographically secure in production — pass us.tractat.kuilt.otel.tap.admit.cryptoRandom. It sources the per-challenge nonces, whose unpredictability is what makes each challenge fresh (replay resistance); a predictable source weakens that. The Random parameter is injectable only so tests can supply a seeded, deterministic source, never as licence for Random.Default.

Constructors

Verify

constructor(token: LogTapJoinToken, clock: Clock, random: Random)

Properties

clock

val clock: Clock

random

val random: Random

token

val token: LogTapJoinToken