Enum AuthenticationApprovalVerifier 

pub enum AuthenticationApprovalVerifier {
    Password {
        salt: String,
        hash: Vec<u8>,
    },
    TotpCode {
        alg: TOTPAlgorithm,
        secret: String,
    },
    Question {
        question: String,
        salt: String,
        hash: Vec<u8>,
    },
    EmailConfirmation,
    Proxy,
    U2fKey {
        registration: Registration,
    },
    X509Certificate {
        public_certificate: Vec<u8>,
    },
    RawDilithium5Certificate {
        public_key: Vec<u8>,
        signatures: Vec<Dilithium5Signature>,
    },
}

Information about authentication that is stored in key-value DB.

Each info about authentication step should be mitigation-prone.

Variants

Password

Password verifier.

Fields

salt: String

hash: Vec<u8>

TotpCode

TOTP verifier.

Fields

alg: TOTPAlgorithm

secret: String

Question

Question-answer pair verifier.

Fields

question: String

salt: String

hash: Vec<u8>

EmailConfirmation

Email verifier.

Proxy

IP address verifier.

U2fKey

U2F verifier.

Fields

registration: Registration

X509Certificate

X.509 verifier.

Fields

public_certificate: Vec<u8>

RawDilithium5Certificate

Dilithium (mode 5) verifier.

Fields

public_key: Vec<u8>

signatures: Vec<Dilithium5Signature>

Implementations

impl<'a> AuthenticationApprovalVerifier

pub fn to_requirement(&self) -> AuthenticationRequirement

Converts stored information to authentication requirement.

pub fn validate( &'a self, request: &'a AuthenticationApproval, password_validator: Option<&'a impl Fn(&'a str, &'a str, &'a [u8]) -> bool>, metatada: &'a AuthenticationState, ) -> bool

Validates requirement with given approval.

WARNING: still can’t validate: Proxy, U2FKey, X509Certificate and RawDilithium5Certificate.

Trait Implementations

impl Clone for AuthenticationApprovalVerifier

fn clone(&self) -> AuthenticationApprovalVerifier

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuthenticationApprovalVerifier

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for AuthenticationApprovalVerifier

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for AuthenticationApprovalVerifier

impl Hash for AuthenticationApprovalVerifier

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl PartialEq for AuthenticationApprovalVerifier

fn eq(&self, other: &AuthenticationApprovalVerifier) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for AuthenticationApprovalVerifier

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for AuthenticationApprovalVerifier