Enum AuthEnforcedBy 

#[non_exhaustive]
pub enum AuthEnforcedBy {
    Caller,
    Target,
    Both,
}

Who’s responsible for enforcing authorization on the downstream call. From the ObjectSecurityProfile of the target. Determines whether the gateway brokers credentials (Caller), trusts the target to handle auth itself (Target), or both layers enforce (Both).

Variants (Non-exhaustive)

Non-exhaustive enums could have additional variants added in future. Therefore, when matching against variants of non-exhaustive enums, an extra wildcard arm must be added to account for any future variants.

Caller

Caller (the gateway / our process) enforces — typical for internal services that trust the gateway’s authorization decision.

Target

Target enforces — typical for external services with their own access control. We may still attach credentials but the downstream makes the final allow/deny decision.

Both

Both layers enforce — defense in depth.

Trait Implementations

impl Clone for AuthEnforcedBy

fn clone(&self) -> AuthEnforcedBy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for AuthEnforcedBy

impl Debug for AuthEnforcedBy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for AuthEnforcedBy

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for AuthEnforcedBy

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for AuthEnforcedBy

impl PartialEq for AuthEnforcedBy

fn eq(&self, other: &AuthEnforcedBy) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for AuthEnforcedBy

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for AuthEnforcedBy