tvc-axum: signed responses with attestation/manifest headers

Cargo.toml

@@ -12,16 +12,20 @@ members = [
   "examples",
   # Contains utilities to work with Turnkey proofs (boot proofs, app proofs)
   "proofs",
-  "tvc"
+  "tvc",
+  # Axum middleware for Turnkey Verifiable Cloud apps (signed responses)
+  "tvc-axum"
 ]
 resolver = "2"
 
 [workspace.dependencies]
 # QuorumOS
-qos_core = { version = "0.12.1", default-features = false }
-qos_crypto = { version = "0.12.1", default-features = false }
-qos_nsm = { version = "0.12.1", default-features = false }
-qos_p256 = { version = "0.12.1", default-features = false }
+qos_core = { version = "0.12.2", default-features = false }
+qos_crypto = { version = "0.12.2", default-features = false }
+qos_hex = { version = "0.12.2", default-features = false }
+qos_json = { version = "0.12.2", default-features = false }
+qos_nsm = { version = "0.12.2", default-features = false }
+qos_p256 = { version = "0.12.2", default-features = false }
 
 # Encoding and serialization
 base64 = { version = "0.22.0", default-features = false, features = ["std"] }
@@ -50,8 +54,11 @@ tracing = { version = "0.1.41", default-features = false, features = ["std"] }
 tracing-subscriber = { version = "0.3.23", default-features = false, features = ["ansi", "env-filter", "fmt"] }
 
 # Web/HTTP
+axum = { version = "0.8", default-features = false }
+http-body-util = { version = "0.1", default-features = false }
 mime = { version = "0.3.17", default-features = false }
 reqwest = { version = "0.12", default-features = false, features = ["json", "rustls-tls", "http2"] }
+tower = { version = "0.5", default-features = false }
 
 # Async runtime
 tokio = { version = "1.47.1", default-features = false }
@@ -110,3 +117,20 @@ turnkey_api_key_stamper = { path = "api_key_stamper", version = "0.11.0" }
 turnkey_client = { path = "client", version = "0.11.0" }
 turnkey_enclave_encrypt = { path = "enclave_encrypt", version = "0.11.0" }
 turnkey_proofs = { path = "proofs", version = "0.11.0" }
+
+# TODO: remove this patch section once qos PR #765
+# (https://github.com/tkhq/qos/pull/765) merges and a new qos_core version is
+# published to crates.io, then bump the qos_* version pins above.
+#
+# The fake manifest builder and trust chain verifier used by tvc-axum live in
+# qos_core on that branch but are not yet in a published release. All qos_*
+# crates are patched to the same git revision because qos_core depends on the
+# other qos crates via in-repo path dependencies; patching only qos_core would
+# produce duplicate crate sources (crates.io + git) and type mismatches.
+[patch.crates-io]
+qos_core = { git = "https://github.com/tkhq/qos", branch = "zeke/manifest-fake-and-verify-helpers" }
+qos_crypto = { git = "https://github.com/tkhq/qos", branch = "zeke/manifest-fake-and-verify-helpers" }
+qos_hex = { git = "https://github.com/tkhq/qos", branch = "zeke/manifest-fake-and-verify-helpers" }
+qos_json = { git = "https://github.com/tkhq/qos", branch = "zeke/manifest-fake-and-verify-helpers" }
+qos_nsm = { git = "https://github.com/tkhq/qos", branch = "zeke/manifest-fake-and-verify-helpers" }
+qos_p256 = { git = "https://github.com/tkhq/qos", branch = "zeke/manifest-fake-and-verify-helpers" }

tvc-axum/Cargo.toml

@@ -0,0 +1,31 @@
+[package]
+name = "tvc-axum"
+version = "0.11.0"
+edition = "2024"
+license = "Apache-2.0"
+description = "Axum middleware for Turnkey Verifiable Cloud apps: signed responses with attestation and manifest headers"
+repository = "https://github.com/tkhq/rust-sdk"
+homepage = "https://turnkey.com"
+readme = "README.md"
+documentation = "https://docs.rs/tvc-axum"
+keywords = ["turnkey", "tvc", "enclaves", "axum", "attestation"]
+categories = ["cryptography", "web-programming"]
+
+[dependencies]
+axum = { workspace = true }
+base64 = { workspace = true }
+http-body-util = { workspace = true }
+qos_core = { workspace = true }
+qos_json = { workspace = true }
+qos_nsm = { workspace = true }
+qos_p256 = { workspace = true }
+serde = { workspace = true }
+sha2 = { workspace = true }
+thiserror = { workspace = true }
+tower = { workspace = true }
+
+[dev-dependencies]
+qos_core = { workspace = true, features = ["mock"] }
+qos_nsm = { workspace = true, features = ["mock"] }
+tokio = { workspace = true, features = ["macros", "rt-multi-thread"] }
+tower = { workspace = true, features = ["util"] }

tvc-axum/README.md

@@ -0,0 +1,41 @@
+# tvc-axum
+
+Axum middleware for Turnkey Verifiable Cloud applications.
+
+`ResponseSigningLayer` signs every HTTP response with the enclave's ephemeral
+key (and optionally the quorum key) using RFC 9421 HTTP Message Signatures
+and an RFC 9530 `Content-Digest`, and attaches the NSM attestation document
+and QOS manifest envelope as response headers so clients can verify the full
+trust chain: manifest → attestation document → response signature.
+
+## Response headers
+
+| Header | Contents |
+| --- | --- |
+| `Content-Digest` | `sha-256=:BASE64(sha256(body)):` (RFC 9530) |
+| `Signature-Input` | `ephemeral=("@method";req "@path";req "@query";req "@status" "content-digest");created=UNIX;keyid="ephemeral";alg="ecdsa-p256-sha256"` plus a `quorum=(...)` entry when a quorum key is configured (RFC 9421) |
+| `Signature` | `ephemeral=:BASE64:` plus `quorum=:BASE64:` when configured (RFC 9421) |
+| `x-tvc-attestation-doc` | base64 NSM attestation document; `user_data` = manifest hash, `public_key` = ephemeral public key |
+| `x-tvc-manifest-envelope` | base64 canonical manifest envelope bytes (`VersionedManifestEnvelope::to_storage_vec`) |
+
+The ephemeral public key is intentionally never sent as its own header:
+verifiers must extract it from the attestation document.
+
+## Usage
+
+```rust,ignore
+let layer = ResponseSigningLayer::builder()
+    .ephemeral_key(ephemeral_pair)   // Arc<qos_p256::P256Pair>, required
+    .quorum_key(quorum_pair)         // optional
+    .nsm(nsm)                        // Arc<dyn qos_nsm::NsmProvider + Send + Sync>, required
+    .manifest_envelope(envelope)     // qos_core VersionedManifestEnvelope, required
+    .build()?;
+
+let app = Router::new().route("/hello", get(hello)).layer(layer);
+```
+
+Use `QosJson<T>` in handlers to serialize response bodies with `qos_json`
+canonical JSON.
+
+See `tests/response_signing.rs` for a complete verification walkthrough
+against an NSM.