Struct ChronixPrincipal 

pub struct ChronixPrincipal {
    pub id: String,
    pub roles: Vec<String>,
}

A Chronix principal (authenticated identity).

Built in one place — chronixd’s authentication middleware, from the credential — so the roles a policy matches on are the same set whichever gate asks. They used to be resolved inside the admin gate alone, so the same role granted an administrative operation and nothing in a namespace policy, and an API key had no roles at all.

Fields

id: String

The principal identifier (an API key name, a JWT subject, a cert CN).

roles: Vec<String>

Roles assigned to this principal, as Chronix::Role parents.

Implementations

impl ChronixPrincipal

pub fn new(id: impl Into<String>) -> Self

Create a new principal.

pub fn with_role(self, role: impl Into<String>) -> Self

Add a role to the principal.

pub fn with_roles<I, S>(self, roles: I) -> Self

where I: IntoIterator<Item = S>, S: Into<String>,

Add several roles.

pub fn to_entity(&self) -> Result<Entity, AuthzError>

Convert to a Cedar entity (roles become parent entities).

Errors

Returns AuthzError::Internal if Cedar rejects the entity.

pub fn role_entities(&self) -> Result<Vec<Entity>, AuthzError>

The role entities this principal claims membership of.

Cedar needs them in the entity set for principal in Chronix::Role::"…" to resolve; a role with no entity is a membership that silently does not hold.

Errors

Returns AuthzError::Internal if Cedar rejects an entity.

pub fn to_entity_uid(&self) -> EntityUid

Convert to the Cedar entity UID.

Trait Implementations

impl Clone for ChronixPrincipal

fn clone(&self) -> ChronixPrincipal

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ChronixPrincipal

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for ChronixPrincipal

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for ChronixPrincipal

impl PartialEq for ChronixPrincipal

fn eq(&self, other: &ChronixPrincipal) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for ChronixPrincipal

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for ChronixPrincipal