Enum RoutePosture 

pub enum RoutePosture {
    Public {
        reason: String,
    },
    Authenticated,
    Permission {
        area: String,
        operation: String,
    },
    Owner {
        field: String,
    },
    Internal {
        callers: Vec<String>,
    },
    ApiKey {
        scope: String,
    },
    Scoped {
        area: String,
        operation: String,
        owner_field: Option<String>,
    },
}

The authorization posture of a custom route, enforced by the platform so a guest handler cannot forget it.

Variants

Public

Deliberately anonymous. reason is mandatory so every public route is greppable and reviewable (third-party webhooks, signup, public profiles).

Fields

reason: String

Authenticated

Any authenticated tenant principal.

Permission

Authenticated and holding the {area}:{operation} permission.

Fields

area: String

operation: String

Owner

Authenticated; the guest scopes the operation to rows whose field equals the caller’s subject. The platform enforces authentication.

Fields

field: String

Internal

Only another service of the tenant, calling through the platform with a platform-minted identity: callers names the services allowed, or is ["*"] for any. User credentials are not accepted.

Fields

callers: Vec<String>

ApiKey

Only a partner key (X-Api-Key) of the tenant holding a scope that covers scope (resource[:action], resource:* covering every action). User credentials are not accepted.

Fields

scope: String

Scoped

Authenticated and holding a grant on {area}:{operation}; the platform resolves the grants’ scopes (@own, @field(…), @all) into the rows the guest may reach, @own meaning owner_field holds the caller’s subject.

Fields

area: String

operation: String

owner_field: Option<String>

Implementations

impl RoutePosture

pub fn is_anonymous(&self) -> bool

Whether a caller with no credentials can reach this route.

pub fn label(&self) -> &'static str

Short human label for audit output.

pub fn feature(&self) -> Option<&'static str>

The platform feature this posture needs beyond route_posture.

pub fn admits_caller(callers: &[String], service: &str) -> bool

Whether service may call a route of this posture: listed, or any service when callers is ["*"].

Trait Implementations

impl Clone for RoutePosture

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for RoutePosture

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for RoutePosture

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for RoutePosture

impl PartialEq for RoutePosture

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for RoutePosture

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for RoutePosture