Enum CapabilityError 

pub enum CapabilityError {
    UntrustedIssuer,
    InvalidSignature,
    CryptoFloorRejected(String),
    NotYetValid,
    Expired,
    AttenuationViolation(String),
    BudgetSplitRejected(BudgetSplitError),
    Internal(String),
}

Errors raised by verify_capability.

Variants

UntrustedIssuer

Issuer public key is not in the trusted set.

InvalidSignature

Canonical-JSON signature did not verify against the issuer key.

CryptoFloorRejected(String)

Signature material violates the configured crypto floor.

NotYetValid

Token is not yet valid (clock is before issued_at).

Expired

Token has expired.

AttenuationViolation(String)

Attenuated capability token violated the chain-binding rule. attenuation_proof.parent_scope_hash did not match either the issuer’s trust-root scope hash (direct issue) or the last delegation link’s scope_hash (delegated chain).

BudgetSplitRejected(BudgetSplitError)

Sibling-sum budget enforcement rejected this delegation.

Internal(String)

An internal invariant was violated (e.g. canonical-JSON failure).

Trait Implementations

impl Clone for CapabilityError

fn clone(&self) -> CapabilityError

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CapabilityError

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for CapabilityError

impl From<BudgetSplitError> for CapabilityError

fn from(err: BudgetSplitError) -> Self

Converts to this type from the input type.

impl PartialEq for CapabilityError

fn eq(&self, other: &CapabilityError) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for CapabilityError