Enum MfaOutcome 

pub enum MfaOutcome {
    Accepted {
        via: MfaMethod,
        recovery_codes_left: i64,
    },
    Rejected,
    Replayed,
    NotEnrolled,
}

The result of checking a second-factor submission.

Every variant but MfaOutcome::Accepted must reach the client as one invalid_credentials, exactly as crate::admin::users::AuthOutcome’s three failures do – they are kept apart here so the log can say which.

Variants

Accepted

Fields

via: MfaMethod

recovery_codes_left: i64

Unspent recovery codes after this submission. The panel shows it; a low number is the nudge to regenerate.

Rejected

Neither a valid code for this moment nor an unspent recovery code.

Replayed

A correct TOTP code, resubmitted inside its own 30-second window (RFC 6238 §5.2). Refused, and worth its own name: it is what somebody replaying an observed code looks like.

NotEnrolled

No confirmed factor to verify against. Reachable only if a factor was removed between the password step and this one.

Implementations

impl MfaOutcome

pub fn reason(&self) -> &'static str

The reason field of admin_mfa_failed, or "" when it succeeded.

Trait Implementations

impl Clone for MfaOutcome

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for MfaOutcome

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for MfaOutcome

impl PartialEq for MfaOutcome

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for MfaOutcome