Struct AccessRequest 

pub struct AccessRequest {
    pub time: SystemTime,
    pub source_ip: IpAddr,
    pub server: Name,
    pub user: Name,
    pub command: Option<Command>,
    pub public_key: String,
    pub mode: Mode,
}

Everything the verifier knows about an access attempt.

Each field becomes a Datalog fact (see crate::vocabulary); the token and the verifier policies decide whether the attempt is allowed.

Fields

time: SystemTime

When the request is evaluated.

source_ip: IpAddr

Client address as seen by the verifier (never taken from the client’s own claims).

server: Name

Server name, as in token rights (not a network address).

user: Name

Account on that server.

command: Option<Command>

Command the session will be restricted to, if any.

public_key: String

OpenSSH fingerprint (SHA256:...) of the holder’s key: the one certified, or the one that logged in to the bastion (not the bastion’s own key towards the server).

mode: Mode

How access will be enforced.

Trait Implementations

impl Clone for AccessRequest

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AccessRequest

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.