Enum InternalAuthNError 

#[non_exhaustive]
pub enum InternalAuthNError {
    InvalidToken,
    Unavailable,
    Other(String),
}

Neutral platform-plane authentication error.

Intentionally coarse-grained and transport-agnostic: it never carries the token or provider-specific detail, so it is safe to surface at a trust boundary. Concrete validators map their own errors into these variants.

Variants (Non-exhaustive)

Non-exhaustive enums could have additional variants added in future. Therefore, when matching against variants of non-exhaustive enums, an extra wildcard arm must be added to account for any future variants.

InvalidToken

The credential was present but failed validation (bad signature, wrong audience, expired, not authenticated by the backend, etc.).

Unavailable

The validation backend (e.g. the K8s TokenReview API) could not be reached or returned a transient failure. Callers may retry or surface 503.

Other(String)

Any other validation failure. The message must not contain the token or other sensitive material.

Trait Implementations

impl Debug for InternalAuthNError

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for InternalAuthNError

fn fmt(&self, __formatter: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Error for InternalAuthNError

fn source(&self) -> Option<&(dyn Error + 'static)>

Returns the lower-level source of this error, if any.

fn description(&self) -> &str

👎Deprecated since 1.42.0:

use the Display impl or to_string()

fn cause(&self) -> Option<&dyn Error>

👎Deprecated since 1.33.0:

replaced by Error::source, which can support downcasting

fn provide<'a>(&'a self, request: &mut Request<'a>)

🔬This is a nightly-only experimental API. (error_generic_member_access)

Provides type-based access to context intended for error reports.