Struct ScopeAuthorizer 

pub struct ScopeAuthorizer { /* private fields */ }

Coarse ADK scope gate. The runtime policy engine still evaluates the exact action.

Implementations

impl ScopeAuthorizer

pub fn new(scopes: impl IntoIterator<Item = impl Into<String>>) -> Self

Construct a scope gate from verified JWT/OIDC request scopes.

pub fn from_verified_identity( principal_id: impl Into<String>, tenant_id: Option<String>, scopes: impl IntoIterator<Item = impl Into<String>>, ) -> Self

Construct from identity already verified by adk-auth JWT/OIDC middleware.

pub fn verified_tenant_id(&self) -> Option<&str>

Tenant identity already verified by adk-auth middleware. Graph/model state is never consulted for this value.

pub fn authorize( &self, context: &ComputerUseAuthContext, ) -> Result<(), AuthorizationError>

Verify coarse entitlement without treating it as runtime action approval.

Errors

Returns AuthorizationError::PrincipalMismatch or AuthorizationError::TenantMismatch when the context identity differs from the verified identity, or AuthorizationError::MissingScope when the required computer:* scope for the requested mode is absent.

Trait Implementations

impl Clone for ScopeAuthorizer

fn clone(&self) -> ScopeAuthorizer

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ScopeAuthorizer

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for ScopeAuthorizer

fn default() -> ScopeAuthorizer

Returns the “default value” for a type.