How to install the signedsource crate // Lib.rs

Adding `signedsource` library as a dependency

Run this command in a terminal, in your project's directory:

cargo add signedsource

To add it manually, edit your project's Cargo.toml file and add to the [dependencies] section:

signedsource = "0.3.0"

The signedsource library will be automatically available globally. Read the signedsource library documentation.

Back to the crate overview.

Readme

This packages originated from https://github.com/facebook/relay. It verifies automatically generated files and effectively prevents from manual pollution. Usage (simplified GraphQL schema snapshoting example):

// we can save a signed file
let new_snapshot = signedsource::sign_file(&format!("# {}\n\n{}", signedsource::SIGNING_TOKEN, schema))

// or verify its content
signedsource::is_signed(&old_snapshot)
signedsource::is_valid_signature(&old_snapshot)

It is also possible to re-sign file which is already signed (means update the signature when it already exists).

Adding signedsource library as a dependency

Adding `signedsource` library as a dependency