Struct Auth 

pub struct Auth { /* private fields */ }

Token and certificate tables. With no tokens and no certificate mappings, authentication is disabled and every request acts as an unrestricted admin.

Implementations

impl Auth

pub fn from_config(cfg: &AuthConfig) -> Result<Auth>

Build from configuration, reading token_env variables.

pub fn disabled() -> Auth

No authentication.

pub fn enabled(&self) -> bool

Whether any credential is configured.

pub fn principal_for_cert(&self, der: &[u8]) -> Option<Principal>

Principal for a client certificate (DER), by DNS subject alternative name.

pub fn authorize( &self, header: Option<&str>, cert: Option<&Principal>, required: Role, ) -> Result<Principal, AuthError>

Authenticate a request from its authorization header and, if any, the principal derived from its client certificate, and check the required role.

pub fn check( &self, header: Option<&str>, required: Role, ) -> Result<Principal, AuthError>

Check a header against a required role (no client certificate).

Trait Implementations

impl Clone for Auth

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Auth

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for Auth

fn default() -> Self

Returns the “default value” for a type.