Enum VerifiedPrincipal 

pub enum VerifiedPrincipal {
    LocalAdmin {
        session_id: String,
    },
    LocalUser {
        user_id: String,
        session_id: String,
        grants: BTreeSet<OperationGrant>,
    },
    PeerSession {
        peer_id: String,
        authenticated_member_id: String,
        grants: BTreeSet<OperationGrant>,
    },
}

Verified principal constructing an internal, non-serializable proof of authority.

Notice: VerifiedPrincipal deliberately does NOT implement Deserialize. A remote payload cannot forge or select an administrative identity or member to bypass endpoint verification.

Variants

LocalAdmin

In-process local administrator authority.

Fields

session_id: String

LocalUser

Authenticated local user session.

Fields

user_id: String

session_id: String

grants: BTreeSet<OperationGrant>

PeerSession

Authenticated remote peer session.

Fields

peer_id: String

authenticated_member_id: String

grants: BTreeSet<OperationGrant>

Implementations

impl VerifiedPrincipal

pub fn local_admin(session_id: impl Into<String>) -> VerifiedPrincipal

Construct a verified local administrator principal.

pub fn local_user( user_id: impl Into<String>, session_id: impl Into<String>, grants: impl IntoIterator<Item = OperationGrant>, ) -> VerifiedPrincipal

Construct an authenticated local user principal with initial grants.

pub fn peer_session( peer_id: impl Into<String>, member_id: impl Into<String>, grants: impl IntoIterator<Item = OperationGrant>, ) -> VerifiedPrincipal

Construct an authenticated remote peer principal with initial grants.

pub fn principal_id(&self) -> String

Primary identity string for attribution and audit.

pub fn is_local_admin(&self) -> bool

Check if this principal is a local administrator.

pub fn covering_grants<'a>( &'a self, required: &OperationGrant, ) -> Vec<&'a OperationGrant>

Held grants that cover the required grant.

A local administrator’s authority is implicit rather than grant-based, so this returns an empty set for it even though Self::has_grant reports true.

pub fn has_grant(&self, required: &OperationGrant) -> bool

Check if this principal holds the requested grant.

Trait Implementations

impl Clone for VerifiedPrincipal

fn clone(&self) -> VerifiedPrincipal

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for VerifiedPrincipal

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Eq for VerifiedPrincipal

impl PartialEq for VerifiedPrincipal

fn eq(&self, other: &VerifiedPrincipal) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for VerifiedPrincipal