Enum ClientTrustLevel 

#[non_exhaustive]
pub enum ClientTrustLevel {
    FirstParty,
    ThirdParty,
    Internal,
    Custom(String),
}

Trust classification for the OAuth client / gateway that brokered the request. Distinct from the user’s subject identity — the same human can connect through a first-party browser flow or a third-party agent, and policies often want to distinguish them.

Custom(String) lets operators carry a finer-grained vocabulary (e.g. "partner-tier-A") without forking the type. The enum is #[non_exhaustive] so new well-known variants can be added later without breaking external matches.

Variants (Non-exhaustive)

Non-exhaustive enums could have additional variants added in future. Therefore, when matching against variants of non-exhaustive enums, an extra wildcard arm must be added to account for any future variants.

FirstParty

First-party clients operated by the same org as this gateway.

ThirdParty

External third-party clients, integrated but not operated by us.

Internal

Internal infrastructure clients (control plane, ops tooling).

Custom(String)

Operator-defined trust level — string carried verbatim into policy. Lookups by value (Hash + Eq) work as long as both sides construct identical strings.

Trait Implementations

impl Clone for ClientTrustLevel

fn clone(&self) -> ClientTrustLevel

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ClientTrustLevel

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for ClientTrustLevel

fn default() -> Self

Default to the most restrictive well-known level so a missing-or-misconfigured client doesn’t silently inherit first-party privileges.

impl<'de> Deserialize<'de> for ClientTrustLevel

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for ClientTrustLevel

impl Hash for ClientTrustLevel

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl PartialEq for ClientTrustLevel

fn eq(&self, other: &ClientTrustLevel) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for ClientTrustLevel

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for ClientTrustLevel