Struct EmbeddedAuthClient 

pub struct EmbeddedAuthClient { /* private fields */ }

AuthClient implementation backed by an embedded AllowThem handle.

Wraps an AllowThem and a login URL. Consuming projects that also need direct AllowThem access (login flow, registration, cookie generation) can keep a separate clone in their state — cloning AllowThem is cheap (Arc).

Implementations

impl EmbeddedAuthClient

pub fn new(ath: AllowThem, login_url: impl Into<String>) -> Self

Create a new EmbeddedAuthClient.

login_url is the local path (e.g. "/login") where unauthenticated users should be redirected.

Trait Implementations

impl AuthClient for EmbeddedAuthClient

fn validate_session<'a>( &'a self, token: &'a SessionToken, ) -> AuthFuture<'a, Option<User>>

Validate a session token and return the active user.

fn check_role<'a>( &'a self, user_id: &'a UserId, role: &'a RoleName, ) -> AuthFuture<'a, bool>

Check whether a user has the given role.

fn check_permission<'a>( &'a self, user_id: &'a UserId, permission: &'a PermissionName, ) -> AuthFuture<'a, bool>

Check whether a user has the given permission (direct or via role).

fn resolve_highest_role<'a>( &'a self, user_id: &'a UserId, hierarchy: &'a [&str], ) -> AuthFuture<'a, Option<String>>

Return the name of the first role in hierarchy that the user holds.

fn logout<'a>(&'a self, token: &'a SessionToken) -> AuthFuture<'a, ()>

Invalidate a session. Fire-and-forget — non-existent sessions are not errors.

fn login_url(&self) -> &str

The URL/path where users should be directed to log in.

fn session_cookie_name(&self) -> &str

The cookie name used for session tokens.