Package com.privatechain.access.invite

package com.privatechain.access.invite
Invitation-token issuance and verification for new-node onboarding (FR-AC-04, FR-AC-05).

A node administrator calls InvitationService to produce a signed token, delivers it out-of-band to the new node operator, and the new node presents it during its first connection attempt. The token is cryptographically bound to a specific node ID and carries an expiry timestamp — expired tokens are always rejected even if their ECDSA signature is valid.

Classes in this package:

  • InvitationService — signs tokens using the admin node's ECKeyPair and verifies incoming tokens against the admin public key.
  • InvitationToken — immutable value object carrying nodeId, expiryEpochSeconds, and the raw ECDSA signature bytes.
Since:
1.0.0
  • Classes
    Class
    Description
    InvitationService
    Service for generating and verifying time-limited invitation tokens for new node onboarding.
    InvitationToken
    Immutable representation of a signed, time-limited invitation token.