Struct AuditEntry 

pub struct AuditEntry {
    pub seq: u64,
    pub at_unix_ms: i64,
    pub method: String,
    pub principal: String,
    pub fingerprint: String,
    pub scope: String,
    pub level: String,
    pub auth_mode: String,
    pub decision: String,
    pub reason: String,
    pub prev: String,
    pub hash: String,
}

One entry, as it sits on disk.

Field order is the serialisation order and the hashing order. It is deny_unknown_fields so a file written by a newer gunnar is refused loudly rather than verified against fields this build cannot see.

Fields

seq: u64

0 for the first entry, then +1 each time. Redundant with the file’s line numbering on purpose: a chain whose only ordering was its line order could be truncated to a shorter, still-valid chain without the entries themselves saying anything was missing.

at_unix_ms: i64

When the decision was made.

method: String

Service.Method.

principal: String

The ACL principal id.

fingerprint: String

The key fingerprint.

scope: String

The scope asked about.

level: String

The grant level.

auth_mode: String

The authentication mode the listener was in.

decision: String

allow, deny, narrow.

reason: String

Why, or empty.

prev: String

The previous entry’s AuditEntry::hash, or GENESIS.

hash: String

This entry’s own hash. Not hashed into itself; see AuditEntry::compute_hash.

Implementations

impl AuditEntry

pub fn compute_hash(&self) -> String

The hash this entry should carry, computed from everything else in it.

Verification is entry.hash == entry.compute_hash() plus entry.prev == previous.hash. Both halves are needed: the first catches an edited field, the second catches a removed, reordered or inserted entry.

Trait Implementations

impl Clone for AuditEntry

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuditEntry

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for AuditEntry

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for AuditEntry

impl PartialEq for AuditEntry

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for AuditEntry

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for AuditEntry