Struct ActorChain 

pub struct ActorChain { /* private fields */ }

A first-class RFC 8693 §4.1 actor chain.

origin serializes as the top-level sub claim: the human principal the request is ultimately on behalf of. actors serializes as nested act claims in RFC order, with the current actor outermost and prior actors nested beneath it. For authorization, only the top-level token claims and ActorChain::current are authoritative. The audit-not-authz rule is that nested actors are audit history only and must not be used to grant access.

Implementations

impl ActorChain

pub fn new(origin: impl Into<String>) -> Self

Create a chain with only an originating subject and no acting agents.

pub fn new_with_scopes<I, S>(origin: impl Into<String>, scopes: I) -> Self

where I: IntoIterator<Item = S>, S: Into<String>,

pub fn from_parts<I, S>(origin: impl Into<String>, actors: I) -> Self

where I: IntoIterator<Item = S>, S: Into<String>,

Build a chain from actors already ordered current-first, matching the RFC 8693 nested act traversal order.

pub fn from_entries<I>(origin: ActorChainEntry, actors: I) -> Self

where I: IntoIterator<Item = ActorChainEntry>,

pub fn push(&mut self, actor: impl Into<String>)

Insert actor as the new current actor.

pub fn push_entry(&mut self, actor: ActorChainEntry)

pub fn pushed(self, actor: impl Into<String>) -> Self

Chainable form of ActorChain::push.

pub fn pushed_with_scopes<I, S>( self, actor: impl Into<String>, scopes: I, ) -> Self

where I: IntoIterator<Item = S>, S: Into<String>,

pub fn pushed_entry(self, actor: ActorChainEntry) -> Self

pub fn current(&self) -> &str

The actor that authorization checks should consider authoritative.

When no delegation has occurred, the originating subject is also the current actor.

pub fn origin(&self) -> &str

The originating human principal carried in the top-level sub claim.

pub fn origin_entry(&self) -> &ActorChainEntry

pub fn current_entry(&self) -> &ActorChainEntry

pub fn actors(&self) -> impl Iterator<Item = &str>

Acting agents in RFC nested-act order: current actor first.

pub fn actor_entries(&self) -> impl Iterator<Item = &ActorChainEntry>

pub fn iter(&self) -> ActorChainIter<'_>

All principals from current actor through the originating subject.

pub fn entries(&self) -> ActorChainEntryIter<'_>

pub fn parent_chain(&self) -> Option<Self>

pub fn is_delegated(&self) -> bool

pub fn may_act(&self) -> Option<&str>

Authorized actor hint from the optional RFC 8693 §4.4 may_act claim.

pub fn set_may_act(&mut self, may_act: impl Into<String>)

pub fn with_may_act(self, may_act: impl Into<String>) -> Self

pub fn clear_may_act(&mut self)

pub fn validate_scope_attenuation( &self, policy: &ScopeAttenuationPolicy, ) -> Result<(), ScopeAttenuationViolation>

pub fn to_json_value(&self) -> Value

pub fn from_json_value(value: &Value) -> Result<Self, ActorChainError>

pub fn to_vm_value(&self) -> VmValue

pub fn from_vm_value(value: &VmValue) -> Result<Self, ActorChainError>

Trait Implementations

impl Clone for ActorChain

fn clone(&self) -> ActorChain

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ActorChain

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for ActorChain

fn deserialize<D>(deserializer: D) -> Result<Self, D::Error>

where D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for ActorChain

impl From<&ActorChain> for VmValue

fn from(chain: &ActorChain) -> Self

Converts to this type from the input type.

impl From<ActorChain> for VmValue

fn from(chain: ActorChain) -> Self

Converts to this type from the input type.

impl Hash for ActorChain

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl<'a> IntoIterator for &'a ActorChain

type Item = &'a str

The type of the elements being iterated over.

type IntoIter = ActorChainIter<'a>

Which kind of iterator are we turning this into?

fn into_iter(self) -> Self::IntoIter

Creates an iterator from a value.

impl PartialEq for ActorChain

fn eq(&self, other: &ActorChain) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for ActorChain

fn serialize<S>(&self, serializer: S) -> Result<S::Ok, S::Error>

where S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for ActorChain

impl TryFrom<&Value> for ActorChain

type Error = ActorChainError

The type returned in the event of a conversion error.

fn try_from(value: &Value) -> Result<Self, Self::Error>

Performs the conversion.

impl TryFrom<&VmValue> for ActorChain

type Error = ActorChainError

The type returned in the event of a conversion error.

fn try_from(value: &VmValue) -> Result<Self, Self::Error>

Performs the conversion.