Struct AuthMiddleware 

pub struct AuthMiddleware { /* private fields */ }

Middleware helper for authentication.

Implementations

impl AuthMiddleware

pub fn new(mode: AuthMode) -> Self

Create a new auth middleware.

pub fn validate_http( &self, headers: &HeaderMap, ) -> Result<Option<String>, AuthError>

Validate HTTP headers and return actor identity (if any).

pub fn validate_grpc( &self, metadata: &MetadataMap, ) -> Result<Option<String>, AuthError>

Validate gRPC metadata and return actor identity (if any).

pub fn mode(&self) -> &AuthMode

pub fn authenticated_subject( &self, actor: Option<&str>, ) -> Result<AuthenticatedSubject, AuthError>

Derive the only subject that the configured local authentication mode can authorize. Call this after the request credentials have been validated; callers cannot select an arbitrary subject string.

pub fn local_read_authorization_recheck( &self, ) -> Arc<dyn LocalReadAuthorizationRecheck>

Return the worker-facing recheck backed by this server’s local policy.

Trait Implementations

impl Clone for AuthMiddleware

fn clone(&self) -> AuthMiddleware

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl LocalReadAuthorizationPolicy for AuthMiddleware

fn authorize_local_read( &self, request: &LocalReadAuthorizationRequest, ) -> Result<(), String>

Authorize the exact read that would be permitted on this server locally.