Enum AuthRefusal 

pub enum AuthRefusal {
    Missing,
    Invalid,
    InsufficientScope {
        credential: String,
        scope: String,
    },
    NotPermitted {
        caller: String,
    },
}

Why the door refused a request before looking at what it asked for.

Variants

Missing

No Authorization header.

Invalid

An Authorization header that does not present a token this session minted, for any reason at all.

InsufficientScope

A valid token whose credential does not carry the scope the request needs.

Fields

credential: String

scope: String

NotPermitted

A genuine formation token issued for another member’s door: caller is a member of this formation that the roster does not let call this one.

Fields

caller: String

Implementations

impl AuthRefusal

pub fn status(&self) -> u16

pub fn code(&self) -> &'static str

The body’s error code.

pub fn challenge(&self, realm: &str) -> String

The www-authenticate challenge, in RFC 6750’s terms, for a door whose realm is realm.

pub fn message(&self) -> String

The body’s message. The 403s name the credential or the member that presented the token, and go only to its holder; neither 401 says why. not_permitted names nothing else — not this member, not the one the token was issued for.

pub fn response(&self, realm: &str) -> ResourceResponse

The refusal as an HTTP response: status, challenge, and the {"error": <code>, "message": <sentence>} body the resource plane also answers with.

Trait Implementations

impl Clone for AuthRefusal

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuthRefusal

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for AuthRefusal

impl PartialEq for AuthRefusal

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for AuthRefusal