Enum SessionAuthMethod 

pub enum SessionAuthMethod {
    Anonymous,
    StaticBearer {
        principal: String,
        token_fingerprint: String,
    },
    OAuthBearer {
        principal: Option<String>,
        issuer: Option<String>,
        subject: Option<String>,
        audience: Option<String>,
        scopes: Vec<String>,
        federated_claims: OAuthBearerFederatedClaims,
        enterprise_identity: Option<EnterpriseIdentityContext>,
        token_fingerprint: Option<String>,
    },
}

Authentication method used to admit a session at the transport layer.

This is intentionally separate from Chio capability authorization. A session may be transport-authenticated and still be denied by capability or guard checks later during operation evaluation.

Variants

Anonymous

StaticBearer

Fields

principal: String

token_fingerprint: String

OAuthBearer

Fields

principal: Option<String>

issuer: Option<String>

subject: Option<String>

audience: Option<String>

scopes: Vec<String>

federated_claims: OAuthBearerFederatedClaims

enterprise_identity: Option<EnterpriseIdentityContext>

token_fingerprint: Option<String>

Implementations

impl SessionAuthMethod

pub fn token_fingerprint(&self) -> Option<&str>

Trait Implementations

impl Clone for SessionAuthMethod

fn clone(&self) -> SessionAuthMethod

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SessionAuthMethod

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for SessionAuthMethod

fn deserialize<__D>( __deserializer: __D, ) -> Result<SessionAuthMethod, <__D as Deserializer<'de>>::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for SessionAuthMethod

fn eq(&self, other: &SessionAuthMethod) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for SessionAuthMethod

fn serialize<__S>( &self, __serializer: __S, ) -> Result<<__S as Serializer>::Ok, <__S as Serializer>::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl Eq for SessionAuthMethod

impl StructuralPartialEq for SessionAuthMethod