adk-auth 0.5.0

Access control and authentication for Rust Agent Development Kit (ADK-Rust)
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59

//! Error types for adk-auth.

use thiserror::Error;

/// Error returned when access is denied.
#[derive(Debug, Clone, Error)]
#[error("Access denied: user '{user}' cannot access {permission}")]
pub struct AccessDenied {
    /// The user who was denied.
    pub user: String,
    /// The permission that was denied.
    pub permission: String,
}

impl AccessDenied {
    /// Create a new access denied error.
    pub fn new(user: impl Into<String>, permission: impl Into<String>) -> Self {
        Self { user: user.into(), permission: permission.into() }
    }
}

/// General auth error.
#[derive(Debug, Error)]
pub enum AuthError {
    /// Access was denied.
    #[error(transparent)]
    AccessDenied(#[from] AccessDenied),

    /// Role not found.
    #[error("Role not found: {0}")]
    RoleNotFound(String),

    /// User not found.
    #[error("User not found: {0}")]
    UserNotFound(String),

    /// Audit error.
    #[error("Audit error: {0}")]
    AuditError(String),

    /// IO error (for file-based audit).
    #[error("IO error: {0}")]
    IoError(#[from] std::io::Error),
}

impl From<AuthError> for adk_core::AdkError {
    fn from(err: AuthError) -> Self {
        use adk_core::{ErrorCategory, ErrorComponent};
        let (category, code) = match &err {
            AuthError::AccessDenied(_) => (ErrorCategory::Forbidden, "auth.access_denied"),
            AuthError::RoleNotFound(_) => (ErrorCategory::NotFound, "auth.role_not_found"),
            AuthError::UserNotFound(_) => (ErrorCategory::NotFound, "auth.user_not_found"),
            AuthError::AuditError(_) => (ErrorCategory::Internal, "auth.audit"),
            AuthError::IoError(_) => (ErrorCategory::Internal, "auth.io"),
        };
        adk_core::AdkError::new(ErrorComponent::Auth, category, code, err.to_string())
            .with_source(err)
    }
}