pep 0.4.0

Policy Enforcement Point - OIDC authentication and authorization library
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62

//! Error types for PEP operations

/// PEP-specific error type
#[derive(Debug, thiserror::Error)]
pub enum PepError {
    #[error("Configuration error: {0}")]
    Config(String),

    #[error("OIDC discovery error: {0}")]
    OidcDiscovery(String),

    #[error("JWKS fetch error: {0}")]
    JwksFetch(String),

    #[error("JWT validation error: {0}")]
    JwtValidation(String),

    #[error("Invalid request: {0}")]
    BadRequest(String),

    #[error("Authentication required")]
    AuthenticationRequired,

    #[error("Authorization failed: {0}")]
    AuthorizationFailed(String),

    #[error("Serialization error: {0}")]
    Serialization(#[from] serde_json::Error),

    #[error("IO error: {0}")]
    Io(#[from] std::io::Error),

    #[error("HTTP error: {0}")]
    Http(#[from] reqwest::Error),

    #[error("Token refresh failed: {status} {detail}")]
    TokenRefreshFailed { status: u16, detail: String },

    #[error("Userinfo endpoint error: {0}")]
    Userinfo(String),

    #[error("Internal error: {0}")]
    Internal(#[from] anyhow::Error),
}

pub type Result<T> = std::result::Result<T, PepError>;

/// HTTP response for errors
#[cfg(feature = "oidc-resource-server")]
impl PepError {
    pub fn status_code(&self) -> http::StatusCode {
        use http::StatusCode;
        match self {
            PepError::BadRequest(_) => StatusCode::BAD_REQUEST,
            PepError::AuthenticationRequired => StatusCode::UNAUTHORIZED,
            PepError::AuthorizationFailed(_) => StatusCode::FORBIDDEN,
            PepError::JwtValidation(_) => StatusCode::UNAUTHORIZED,
            PepError::OidcDiscovery(_) | PepError::JwksFetch(_) | PepError::Userinfo(_) => StatusCode::BAD_GATEWAY,
            _ => StatusCode::INTERNAL_SERVER_ERROR,
        }
    }
}