Struct VerifiedHolder 

pub struct VerifiedHolder { /* private fields */ }

Who a connection is, as the one Connect verification proved it (ACCESS-004 R1).

Two verifications make one, both in this module: [PassVerifier::verify], from a pass whose registry signature and validity window it has checked, and VerifiedHolder::from_lys_session, from a Lys pass the installed admitter verified offline at Connect (ACCESS-001, the second producer). There is no other constructor, so no further credential scheme can produce one by accident. A bearer Connect names no one and yields none.

No code outside this module can build one (ACCESS-004 R1):

let holder = liminal_server::auth_pass::VerifiedHolder {
    participant: b"watcher".to_vec(),
    live: "watcher.".to_owned(),
};
drop(holder);

Implementations

impl VerifiedHolder

pub fn kind(&self) -> Option<&str>

The holder’s Lys directory kind, when a Lys pass proved it and stated one; None for a registry-pass holder.

pub fn allows_channel(&self, channel: &str) -> bool

Whether this holder’s own grant covers channel. A registry pass grants its live prefix, and an empty prefix grants nothing. A Lys holder’s rights are the Lys session’s per-subject decision, which the connection makes before it asks this; the holder adds no second rule.

pub fn participant(&self) -> &[u8]

The holder’s participant bytes, as the pass named them.

pub fn live(&self) -> &str

The subject prefix the holder’s pass grants.

pub fn is_named(&self, identity: &str) -> bool

Whether identity names this holder: its UTF-8 bytes equal the participant’s exactly (ACCESS-004 R2).

Trait Implementations

impl Clone for VerifiedHolder

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for VerifiedHolder

fn fmt(&self, formatter: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for VerifiedHolder

impl PartialEq for VerifiedHolder

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for VerifiedHolder