ic_auth_protocol_types/admission.rs
1//! Bounded admission diagnostics, never evidence that a proof is authentic.
2use serde::{Deserialize, Serialize};
3
4/// A receiver refusal. Only `NotYetValid` identifies a future-start retry hint;
5/// it grants no clock grace, new issuance, deadline extension or authorization.
6/// The caller owns bounded retries of the same credential and login generation.
7#[derive(Clone, Copy, Debug, Deserialize, Serialize, Eq, PartialEq)]
8pub enum AdmissionRefusal {
9 NotYetValid,
10 Expired,
11 InvalidCredential,
12 AuthorityUnavailable,
13 BeforeReset,
14 ScopeRejected,
15 ReplayConflict,
16 Revoked,
17 Capacity,
18 Throttled,
19 Unavailable,
20}