Enum OpenIdentity 

pub enum OpenIdentity {
    Credentialless,
    ServiceCredentials {
        token_id: String,
        secret: SecretString,
    },
    CatalogCredentials {
        username: String,
        password: SecretString,
    },
}

The identity requested when attaching a shared handle (spec §2.2).

Catalog credentials are verified against the live shared catalog before a handle is issued. Service credentials are verified against the core’s service-principal store (P0.1). The secret allocation is zeroized when attach returns.

Callers cannot supply a permission vector on open — that was the P0.1 authority gap (ScopedServicePrincipal). Service authority is assigned only by admin registration on the shared core.

Variants

Credentialless

Attach without credentials. Rejected (fail closed) when the database catalog has require_auth enabled.

ServiceCredentials

Authenticate one registered service principal by token id + secret.

Fields

token_id: String

secret: SecretString

CatalogCredentials

Authenticate one catalog user on the existing shared core.

Fields

username: String

password: SecretString

Trait Implementations

impl Debug for OpenIdentity

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.