Enum Caller 

pub enum Caller {
    Local {
        uid: Option<u32>,
    },
    Access(Identity),
    Unauthenticated {
        addr: SocketAddr,
    },
    User {
        principal: Arc<Principal>,
    },
    Superadmin(Arc<Superadmin>),
}

Who made a call. Handlers use it for audit logs and to hold remote callers to a stricter policy than the local CLI.

Variants

Local

Over the unix socket, where filesystem permissions are the gate.

Fields

uid: Option<u32>

Access(Identity)

Through Cloudflare Access, with a verified assertion.

Unauthenticated

Loopback TCP with Access validation explicitly turned off. Anyone who can reach the port.

Fields

addr: SocketAddr

User

A signed-in isb user: an API token, a session, or an Access identity that maps to a user.

Fields

principal: Arc<Principal>

Superadmin(Arc<Superadmin>)

The unix socket’s reach over HTTP: a superadmin token, or a tailnet identity on the superadmin allow list (crate::auth::superadmin).

Implementations

impl Caller

pub fn downscope(&self) -> Option<&OrgId>

The org an org-bound endpoint scoped this caller down to, if it did.

pub fn downscoped_to(self, org: &OrgId) -> Caller

This caller on an org-bound endpoint (/orgs/<org>/...): a superadmin over HTTP or a platform admin acts as an admin of org only (crate::auth::Principal::downscoped_to). The unix socket and everyone else are unchanged.

impl Caller

pub fn is_trusted(&self) -> bool

A superadmin: the unix socket, or an HTTP caller with the socket’s reach. Every tool, no remote-spec policy, any instance.

pub fn is_local(&self) -> bool

Literally the unix socket: the daemon’s own user on this host.

pub fn superadmin(&self) -> Option<&Superadmin>

pub fn superadmin_source(&self) -> Option<String>

Where a superadmin’s power comes from: socket, token:<name>, tailnet:<login>; None for everyone else.

pub fn identity(&self) -> Option<&Identity>

pub fn principal(&self) -> Option<&Principal>

A signed-in user’s principal. None for superadmins too, which reach every org: code that filters by a principal’s orgs treats them as it treats the socket.

Trait Implementations

impl Clone for Caller

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Caller

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for Caller

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for Caller

impl PartialEq for Caller

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for Caller