Struct DoorAuth 

pub struct DoorAuth { /* private fields */ }

One session’s door key and the tokens minted with it, and — for a formation member — what its door checks a formation token with.

Implementations

impl DoorAuth

pub fn mint(authentication: &NetworkAuthentication) -> Result<Self, String>

Generates this session’s key and mints the operator token, holding every scope in DOOR_SCOPES, and one token per declared credential with exactly its scopes.

The Err is the operating system refusing randomness, and carries no key material.

pub fn with_formation(self, verifier: FormationVerifier) -> Self

This door, also taking formation tokens issued to the member verifier names.

pub fn operator_token(&self) -> &DoorToken

The token holding every scope.

pub fn tokens(&self) -> &[(String, DoorToken)]

Every token this session minted, operator first, then the declared credentials by name.

pub fn verify( &self, authorization_headers: &[&str], ) -> Result<DoorGrant, AuthRefusal>

The grant authorization_headers present: every Authorization header value on the request, as sent.

No header is AuthRefusal::Missing. More than one, a scheme other than Bearer, a token this key did not seal, and a payload naming a scope outside DOOR_SCOPES are all AuthRefusal::Invalid, indistinguishably. So is a formation token that does not verify, and every formation token at a door with no verifier. A genuine formation token issued for another door is AuthRefusal::NotPermitted.

Trait Implementations

impl Debug for DoorAuth

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.