Enum AuthError 

#[non_exhaustive]
pub enum AuthError {
    NotVerified,
    Unavailable(String),
}

Why a caller could not be identified.

Two cases and they are not the same refusal: one is the caller’s problem and one is the deployment’s, so one is a 401 and the other a 503. Collapsing them would tell a user to sign in again while the auth service is down, and they would, and it would not help.

Variants (Non-exhaustive)

Non-exhaustive enums could have additional variants added in future. Therefore, when matching against variants of non-exhaustive enums, an extra wildcard arm must be added to account for any future variants.

NotVerified

A credential was presented and did not verify — malformed, expired, wrong audience, unknown key. One variant on purpose: each answer a caller can tell apart is a hint about how to get closer.

Unavailable(String)

The verifier could not be reached or could not answer.

The message is an adapter’s, so it can carry a connection URL with credentials in it, or an address. Display runs it through crate::logging::scrub_text for the reason DbError does (#135): “this never reaches a caller” is a promise about every call site rather than about this type, and four credential leaks in this codebase had exactly that shape. Debug keeps the raw string, and the logging formatters scrub {:?} too.

Trait Implementations

impl Clone for AuthError

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuthError

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for AuthError

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for AuthError

impl Error for AuthError

fn source(&self) -> Option<&(dyn Error + 'static)>

Returns the lower-level source of this error, if any.

fn description(&self) -> &str

👎Deprecated since 1.42.0:

use the Display impl or to_string()

fn cause(&self) -> Option<&dyn Error>

👎Deprecated since 1.33.0:

replaced by Error::source, which can support downcasting

fn provide<'a>(&'a self, request: &mut Request<'a>)

🔬This is a nightly-only experimental API. (error_generic_member_access)

Provides type-based access to context intended for error reports.

impl PartialEq for AuthError

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for AuthError