Struct AuthContext 

pub struct AuthContext {
    pub user: String,
    pub permissions: Vec<Permission>,
    pub token_id: String,
    pub scope: TokenScope,
}

Fields

user: String

permissions: Vec<Permission>

token_id: String

scope: TokenScope

Implementations

impl AuthContext

pub fn has_permission(&self, perm: Permission) -> bool

pub fn can_read(&self) -> bool

pub fn can_write(&self) -> bool

pub fn can_push(&self) -> bool

pub fn is_admin(&self) -> bool

pub fn can_access_repo(&self, repo: &str) -> bool

pub fn can_access_namespace(&self, namespace: &str) -> bool

Whether this context may access namespace.

NamespaceTree(scope) grants access downward only: the scope namespace itself and any descendant (scope/...). It deliberately does NOT grant upward access — a token scoped to a child namespace cannot reach its parent or ancestors. This mirrors Self::can_access_repo.

Containment is segment-aware via scope_contains: candidates with ./../empty segments are denied outright (no check-then-normalize bypass).

Trait Implementations

impl Clone for AuthContext

fn clone(&self) -> AuthContext

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuthContext

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.