Struct TokenPolicy 

pub struct TokenPolicy {
    pub require_dbs: bool,
    pub dbs_sub_pattern: Option<String>,
}

Rules a token must meet beyond a valid signature.

Fields

require_dbs: bool

Refuse non admin tokens without a dbs claim (by default an absent claim means every database).

dbs_sub_pattern: Option<String>

A glob every dbs entry must match after {sub} is replaced by the token’s sub, e.g. tenant.{sub}.*. Tokens without a sub, or whose sub holds anything but letters, digits, - and _, are refused.

Implementations

impl TokenPolicy

pub fn check(&self, agent: &AuthenticatedAgent) -> Result<(), ApiError>

Check a decoded caller against the policy.

Trait Implementations

impl Clone for TokenPolicy

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for TokenPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for TokenPolicy

fn default() -> Self

Returns the “default value” for a type.