Enum IdentityError 

pub enum IdentityError {
    InvalidCredentials,
    AccountLocked,
    MfaRequired {
        challenge_id: String,
    },
    MfaFailed,
    AlreadyExists,
    InvalidToken,
    Forbidden,
    NotFound,
    Internal(String),
    Unavailable,
    PasswordRejected(String),
    ConsentRequired(Vec<String>),
    RateLimited,
}

Everything the CIAM engine can reject a request for.

Kept deliberately coarse: the exact reason for an auth failure must never leak to the caller (account enumeration), so several variants intentionally collapse to the same 401 at the boundary.

Variants

InvalidCredentials

Bad email/password, unknown user, unverified account used where verification is required — anything that must present as a generic 401.

AccountLocked

Account exists but is locked (too many failed attempts) or suspended.

MfaRequired

A second factor is required and was not satisfied. Carries an opaque challenge id the client echoes back with the factor response.

Fields

challenge_id: String

MfaFailed

The supplied MFA code / assertion was wrong.

AlreadyExists

Registration collided with an existing identity.

InvalidToken

A one-time token (verify link, reset, magic link, OTP) was missing, expired, already consumed, or forged.

Forbidden

The caller is authenticated but not allowed to perform the action.

NotFound

Requested identity / resource does not exist (safe to reveal).

Internal(String)

Backend store / hashing / signing failure — maps to 500.

Unavailable

A distributed dependency (lockout backend, store) was unavailable and policy is fail-closed.

PasswordRejected(String)

A chosen password failed the complexity policy or appeared in a breach corpus. Safe to reveal the reason (this is registration, not login).

ConsentRequired(Vec<String>)

The subject has not granted the consents required to issue tokens.

RateLimited

Too many attempts against an abuse-limited action (OTP send, signup).

Trait Implementations

impl Clone for IdentityError

fn clone(&self) -> IdentityError

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for IdentityError

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for IdentityError

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Error for IdentityError

fn source(&self) -> Option<&(dyn Error + 'static)>

Returns the lower-level source of this error, if any.

fn description(&self) -> &str

👎Deprecated since 1.42.0:

use the Display impl or to_string()

fn cause(&self) -> Option<&dyn Error>

👎Deprecated since 1.33.0:

replaced by Error::source, which can support downcasting

fn provide<'a>(&'a self, request: &mut Request<'a>)

🔬This is a nightly-only experimental API. (error_generic_member_access)

Provides type-based access to context intended for error reports.

impl From<IdentityError> for HttpException

fn from(e: IdentityError) -> Self

Converts to this type from the input type.