Struct StepUpPolicy 

pub struct StepUpPolicy {
    pub rules: Vec<Rule>,
    pub default: AttestRequirement,
}

The per-action step-up policy: a set of selector rules plus a fall-through default. Most-specific (longest matching selector) wins. This is the authoring surface behind the operator menu (yes once / yes always / yes on passkey / no); it composes on top of the Caveats grant — Caveats decides whether the authority exists, this decides what gesture admits its use.

Fields

rules: Vec<Rule>

Selector rules, evaluated most-specific-wins.

default: AttestRequirement

The requirement for any action no rule matches.

Implementations

impl StepUpPolicy

pub const EMPTY: StepUpPolicy

The empty policy: nothing ever needs a gesture. Used by the back-compat no-step-up path so existing behavior is unchanged.

pub fn new(rules: Vec<Rule>, default: AttestRequirement) -> StepUpPolicy

A policy with the given rules and default.

pub fn required_for(&self, request: &CallRequest) -> AttestRequirement

The strongest requirement matching request (longest selector wins), or the policy default when none match.

Trait Implementations

impl Clone for StepUpPolicy

fn clone(&self) -> StepUpPolicy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for StepUpPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Default for StepUpPolicy

fn default() -> StepUpPolicy

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for StepUpPolicy

fn deserialize<__D>( __deserializer: __D, ) -> Result<StepUpPolicy, <__D as Deserializer<'de>>::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for StepUpPolicy

impl PartialEq for StepUpPolicy

fn eq(&self, other: &StepUpPolicy) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for StepUpPolicy

fn serialize<__S>( &self, __serializer: __S, ) -> Result<<__S as Serializer>::Ok, <__S as Serializer>::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for StepUpPolicy