Struct AuthInterceptor 

pub struct AuthInterceptor<B, N, H> { /* private fields */ }

Runs Pipeline::authenticate once per call, before any message reaches a handler, and stores the resulting crate::pipeline::Authenticated (with its test directives under test-faults) in the request extensions. A unary call is checked against its exact request bytes; a client stream against its headers only; DownloadPack’s single request envelope is buffered, verified over its reconstructed framed body (0x00‖be32(len)‖message, R-129) and re-injected.

Calls outside mkit.transport.v1.TransportService (health) pass through unauthenticated. For crate::pipeline::AuthMode::TransportIdentity an adapter inserts the peer’s Principal into the HTTP request extensions; nothing a client sends can set it.

It must be the first (outermost) interceptor. An adapter that builds its own chain from super::router registers it before any other, so no interceptor can rewrite the message before the signature is checked. A rewritten unary payload is verified over its re-encoded bytes, which fails closed.

A unary body is verified as connectrpc hands it over, after any Content-Encoding is undone. The client signs the bytes it sends (SPEC-WRITE-GRANTS §9.2, SPEC-TRANSPORT-CONNECT §7.1), so a compressed signed request does not verify and is rejected unauthenticated, as in vcs-worker.

Implementations

impl<B: MultipartBlobStore, N: NamespaceStore, H: HookSet> AuthInterceptor<B, N, H>

pub fn new(pipeline: Arc<Pipeline<B, N, H>>) -> Self

An interceptor authenticating against pipeline’s auth mode.

Trait Implementations

impl<B, N, H> Debug for AuthInterceptor<B, N, H>

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<B, N, H> Interceptor for AuthInterceptor<B, N, H>

where B: MultipartBlobStore + 'static, N: NamespaceStore + 'static, H: HookSet + 'static,

fn intercept_unary<'life0, 'life1, 'async_trait>( &'life0 self, req: UnaryRequest, next: Next<'life1>, ) -> Pin<Box<dyn Future<Output = Result<UnaryResponse, ConnectError>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Wrap a unary RPC. The default is a passthrough.

fn intercept_streaming<'life0, 'life1, 'async_trait>( &'life0 self, req: StreamRequest, inbound: PayloadStream, next: NextStream<'life1>, ) -> Pin<Box<dyn Future<Output = Result<StreamResponse, ConnectError>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Wrap a streaming RPC. The default is a passthrough.