Struct PasswordContext 

pub struct PasswordContext { /* private fields */ }

The words that name this deployment, barred from an operator’s password.

ASVS 5.0 V6.1.2 asks for such a list to be documented and V6.2.11 for it to be enforced; the operator-facing copy is doc/src/operations/webadmin_users.md. It is derived rather than hardcoded because the name of the thing being protected is the first password anybody reaches for, and that name differs per deployment.

Two limits are deliberate and worth knowing before trusting it:

• A CA already on disk is not described here. [signer.local_ca.subject] is read only when this server generates a CA, so an adopted ca.pem carries a subject configuration never sees. Reading it back would mean parsing every mounted profile’s certificate on a CLI path that has not otherwise opened one. When common_name is unset the built-in default is acme-proxy local CA, whose only words worth barring are already in [UNIVERSAL_CONTEXT_WORDS].
• country is excluded, being two characters and so below [MIN_CONTEXT_WORD_LEN] whatever it holds.

Implementations

impl PasswordContext

pub fn empty() -> Self

No words: every password passes the context rule.

What a caller with no configuration in hand uses. It is a weaker check, never a wrong one – the length and corpus rules still run.

pub fn from_config(config: &Config, username: &str) -> Self

Derives the list from the deployment’s own configuration and the operator’s own name.

Cannot fail. A [profiles] table that will not resolve contributes nothing and the global [signer] still does: refusing a password change because an unrelated profile is misconfigured would be a lockout caused by the control that exists to prevent one.

Trait Implementations

impl Clone for PasswordContext

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for PasswordContext

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for PasswordContext

fn default() -> Self

Returns the “default value” for a type.

impl Eq for PasswordContext

impl PartialEq for PasswordContext

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for PasswordContext