Struct PathValidator 

pub struct PathValidator {
    pub raw_prefix_match: bool,
}

The default validator: permission check + path-prefix check.

A request is allowed when:

1. the token is not expired (TokenClaims::exp), and
2. it carries the Permission required by action, and
3. the requested path starts with one of allowed_paths.

Paths are compared on a segment boundary: allowed_paths = ["/docs"] matches /docs, /docs/a.txt and /docs/ but not /docshop/x. The root prefix "/" (or "") grants access to the whole tree. An empty allowed_paths list denies everything.

Fields

raw_prefix_match: bool

When true, allowed_paths are treated as raw string prefixes (no segment-boundary normalization). Default: false.

Implementations

impl PathValidator

pub fn new() -> Self

Creates a validator with segment-boundary path matching.

Trait Implementations

impl Clone for PathValidator

fn clone(&self) -> PathValidator

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for PathValidator

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for PathValidator

fn default() -> PathValidator

Returns the “default value” for a type.

impl Validator for PathValidator

fn validate( &self, claims: &TokenClaims, path: &str, action: Action, ) -> Result<(), AuthError>

Validate a request. Returns Ok(()) or a descriptive AuthError to be turned into 401/403 by the server.