Enum DelegationError 

pub enum DelegationError {
    ScopeWidened {
        from: String,
        to: String,
        widened: String,
    },
    ValidityWidened {
        from: String,
        to: String,
        delegator_until: String,
        delegate_until: String,
    },
    AudienceWidened {
        from: String,
        to: String,
        delegator_audience: String,
        delegate_audience: String,
    },
    TooDeep {
        depth: usize,
        max: usize,
    },
    Empty,
    Expired {
        subject: String,
        not_after: String,
        at: String,
    },
    WrongAudience {
        subject: String,
        audience: String,
        plane: String,
    },
}

Why a delegation was refused.

Variants

ScopeWidened

The delegate asked for authority the delegator does not hold.

Rejected at construction, not detected in review: this is the escalation the whole mechanism exists to make unrepresentable.

Fields

from: String

to: String

widened: String

ValidityWidened

The delegate would outlive its delegator.

The same rule as scope, on the time axis: a link that expires later than the one above it holds authority its delegator will no longer have, which is how a short-lived credential buys a long-lived one.

Fields

from: String

to: String

delegator_until: String

delegate_until: String

AudienceWidened

The delegate names a plane its delegator was not issued for.

An audience is a bound on where a chain may be spent. A delegate naming a different one would carry its delegator’s authority to a plane the delegator never held it at.

Fields

from: String

to: String

delegator_audience: String

delegate_audience: String

TooDeep

The chain is longer than the manifest allows.

A depth cap is not about scope; it bounds how far a request can travel from the human who authorized it before nobody can reason about it.

Fields

depth: usize

max: usize

Empty

A chain arrived with no links, or with no owner at its root.

Expired

The chain’s validity ended before this run was admitted.

A refusal at admission only — never on replay, where the recorded chain is history rather than a credential being presented.

Fields

subject: String

not_after: String

at: String

WrongAudience

The chain was issued for another plane.

Nothing about the chain is wrong; it is being spent where it must not be. The presented credential names an audience, and this is not it.

Fields

subject: String

audience: String

plane: String

Trait Implementations

impl Clone for DelegationError

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for DelegationError

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for DelegationError

fn fmt(&self, __formatter: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for DelegationError

impl Error for DelegationError

fn source(&self) -> Option<&(dyn Error + 'static)>

Returns the lower-level source of this error, if any.

fn description(&self) -> &str

👎Deprecated since 1.42.0:

use the Display impl or to_string()

fn cause(&self) -> Option<&dyn Error>

👎Deprecated since 1.33.0:

replaced by Error::source, which can support downcasting

fn provide<'a>(&'a self, request: &mut Request<'a>)

🔬This is a nightly-only experimental API. (error_generic_member_access)

Provides type-based access to context intended for error reports.

impl From<DelegationError> for RuntimeError

fn from(source: DelegationError) -> Self

Converts to this type from the input type.

impl PartialEq for DelegationError

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for DelegationError