Enum AuthError 

pub enum AuthError {
    MissingToken,
    InvalidTokenFormat(String),
    TokenExpired,
    InvalidSignature,
    UnsupportedAlgorithm {
        alg: String,
    },
    UnknownKid {
        kid: String,
    },
    ReplayDetected {
        jti: String,
    },
    Forbidden {
        resource_type: String,
        operation: String,
    },
    JwksFetchError(String),
    ValidationError(String),
    InternalError(String),
}

Errors that can occur during authentication and authorization.

Variants

MissingToken

No Authorization header present.

InvalidTokenFormat(String)

Authorization header is malformed.

TokenExpired

Token has expired.

InvalidSignature

Token signature is invalid.

UnsupportedAlgorithm

JWT algorithm is not in the allowed list.

Fields

alg: String

The algorithm that was rejected.

UnknownKid

Key ID from JWT header not found in JWKS.

Fields

kid: String

The key ID that was not found.

ReplayDetected

Token with this JTI has already been used.

Fields

jti: String

The replayed JWT ID.

Forbidden

Authenticated principal lacks required scopes.

Fields

resource_type: String

The FHIR resource type.

operation: String

The operation that was attempted.

JwksFetchError(String)

Failed to fetch JWKS from the endpoint.

ValidationError(String)

General token validation error.

InternalError(String)

Internal error in the auth subsystem.

Trait Implementations

impl Debug for AuthError

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for AuthError

fn fmt(&self, __formatter: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Error for AuthError

fn source(&self) -> Option<&(dyn Error + 'static)>

Returns the lower-level source of this error, if any.

fn description(&self) -> &str

👎Deprecated since 1.42.0:

use the Display impl or to_string()

fn cause(&self) -> Option<&dyn Error>

👎Deprecated since 1.33.0:

replaced by Error::source, which can support downcasting

fn provide<'a>(&'a self, request: &mut Request<'a>)

🔬This is a nightly-only experimental API. (error_generic_member_access)

Provides type-based access to context intended for error reports.