Enum LexeScope 

pub enum LexeScope {
    All,
    GatewayProxy,
}

An infra-level scope which gates a bearer auth token’s access to Lexe-run services and resources.

This is distinct from the application-level authorization that determines which node endpoints a given client credential may call; that lives with the revocable client machinery, not here. A LexeScope answers “what may this token do against Lexe’s infrastructure”, e.g. the backend or the gateway CONNECT proxy.

Scopes form a lattice: a token granted a broader scope is accepted wherever a narrower scope is required (see LexeScope::has_permission_for).

Variants

All

Full access to all Lexe-run services. Short-lived (max 1 hour).

GatewayProxy

Authorizes the gateway to act as the user’s proxy, in either of two ways:

• a CONNECT tunnel to the user’s own node, or
• a request the gateway makes to the backend (AppBackendApi) on the user’s behalf, using its own backend credentials.

This grants neither direct backend access nor forwarding of this token to the backend; that’s LexeScope::All. May be long-lived (max 20 years), so it can back a long-lived client credential.

Implementations

impl LexeScope

pub fn has_permission_for(&self, requested: &Self) -> bool

Returns true if this granted scope covers the requested scope.

Trait Implementations

impl Clone for LexeScope

fn clone(&self) -> LexeScope

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for LexeScope

impl Debug for LexeScope

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for LexeScope

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for LexeScope

impl Hash for LexeScope

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl PartialEq for LexeScope

fn eq(&self, other: &LexeScope) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for LexeScope

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for LexeScope