lilo-im-core 0.1.1

Identity Matters core: Authorizer trait, Principal types, peer credential extraction (Helioy v1 IAM)
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43

use thiserror::Error;

use crate::types::{Action, Principal};

#[derive(Debug, Clone, PartialEq, Eq, Error)]
pub enum AuthzError {
    #[error("unauthorized principal for action")]
    Unauthorized {
        principal: Principal,
        action: Action,
        reason: String,
    },
    #[error("unknown principal")]
    UnknownPrincipal,
    #[error("audit sink failed: {message}")]
    Audit { message: String },
    #[error("internal authorization error: {message}")]
    Internal { message: String },
}

impl AuthzError {
    #[must_use]
    pub fn audit(error: AuditError) -> Self {
        Self::Audit {
            message: error.to_string(),
        }
    }
}

#[derive(Debug, Clone, PartialEq, Eq, Error)]
pub enum AuditError {
    #[error("{message}")]
    Sink { message: String },
}

impl AuditError {
    #[must_use]
    pub fn sink(message: impl Into<String>) -> Self {
        Self::Sink {
            message: message.into(),
        }
    }
}