Enum CampAuthorityError 

#[non_exhaustive]
pub enum CampAuthorityError {
    AlreadyExists(PrincipalId),
    WrongPrincipalKind(PrincipalKind),
    InvalidDelegation(DelegationError),
    DelegationMismatch(&'static str),
    DelegationExpired,
    UntrustedSigningKey(PrincipalId),
    BadSignature,
    Principal(PrincipalError),
    Store(StoreError),
}

Typed failure modes for CampAuthority operations.

HTTP layer maps these to status codes (camps route in cheers-axum): AlreadyExists → 409, InvalidDelegation → 400, UntrustedSigningKey → 401, DelegationMismatch / DelegationExpired → 400, BadSignature → 401, WrongPrincipalKind → 500, Store → 500.

Variants (Non-exhaustive)

Non-exhaustive enums could have additional variants added in future. Therefore, when matching against variants of non-exhaustive enums, an extra wildcard arm must be added to account for any future variants.

AlreadyExists(PrincipalId)

A camp principal with the requested desired_id already exists.

WrongPrincipalKind(PrincipalKind)

bound_to (in NewCampPrincipal) is not a user principal — a programmer error, since the HTTP layer’s parser would have caught it.

InvalidDelegation(DelegationError)

The presented UserDelegation violates its own invariants (non-user bound_to, empty camp_id, …). Surfaces only when the caller pre-built a UserDelegation value through a path that bypassed UserDelegation::new — over the wire, UserDelegation deserialization runs the same check.

DelegationMismatch(&'static str)

The delegation’s bound_to doesn’t match the NewCampPrincipal::bound_to, or its camp_id doesn’t match desired_id. The delegation says “U authorises camp C”; if the provision request doesn’t, the binding is not what was signed.

DelegationExpired

delegation.expires_at <= now.

UntrustedSigningKey(PrincipalId)

The delegation’s user_signing_key is not in the trusted set for bound_to (no UserSigningKey row, or the matching row is Revoked).

BadSignature

Ed25519 signature failed to verify under the supplied user_signing_key.

Principal(PrincipalError)

Programmer error reaching the authority with a non-camp principal id for cascade revoke / similar — bubbles PrincipalError.

Store(StoreError)

Underlying store failure.

Trait Implementations

impl Debug for CampAuthorityError

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for CampAuthorityError

fn fmt(&self, __formatter: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Error for CampAuthorityError

fn source(&self) -> Option<&(dyn Error + 'static)>

Returns the lower-level source of this error, if any.

fn description(&self) -> &str

👎Deprecated since 1.42.0:

use the Display impl or to_string()

fn cause(&self) -> Option<&dyn Error>

👎Deprecated since 1.33.0:

replaced by Error::source, which can support downcasting

fn provide<'a>(&'a self, request: &mut Request<'a>)

🔬This is a nightly-only experimental API. (error_generic_member_access)

Provides type-based access to context intended for error reports.

impl From<DelegationError> for CampAuthorityError

fn from(source: DelegationError) -> Self

Converts to this type from the input type.

impl From<PrincipalError> for CampAuthorityError

fn from(source: PrincipalError) -> Self

Converts to this type from the input type.

impl From<StoreError> for CampAuthorityError

fn from(source: StoreError) -> Self

Converts to this type from the input type.