Struct LocalAsyncAuthorizationServiceClient 

pub struct LocalAsyncAuthorizationServiceClient<C> { /* private fields */ }

Trait Implementations

impl<C> AsyncService<C> for LocalAsyncAuthorizationServiceClient<C>

fn new(client: C, runtime: &Arc<ConjureRuntime>) -> Self

Creates a new service wrapping an async HTTP client.

impl<C: Clone> Clone for LocalAsyncAuthorizationServiceClient<C>

fn clone(&self) -> LocalAsyncAuthorizationServiceClient<C>

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<C: Debug> Debug for LocalAsyncAuthorizationServiceClient<C>

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<I: Stream<Item = Result<Bytes, Error>>, __C> LocalAsyncAuthorizationService<I> for LocalAsyncAuthorizationServiceClient<__C>

where __C: LocalAsyncClient<ResponseBody = I>,

async fn authorize( &self, auth_: &BearerToken, request: &AuthorizationRequest, ) -> Result<BTreeSet<ResourceIdentifier>, Error>

Given a set of resources, returns the set of resources that the user is authorized to access.

async fn batch_get_workspace_for_resource( &self, auth_: &BearerToken, request: &BTreeSet<ResourceIdentifier>, ) -> Result<BTreeMap<ResourceIdentifier, WorkspaceRid>, Error>

Given a set of resources, returns the workspace that each resource belongs to. If a user is not authorized on the resource, will omit the resource from the response.

async fn register_in_workspace( &self, auth_: &BearerToken, request: &RegisterInWorkspaceRequest, ) -> Result<(), Error>

Marks a set of resources as belonging to a workspace. Either all resources are registered or none are. If the user is not in the workspace, this will throw. If a resource already belongs to a different workspace, this will throw. If a resource already belongs to this workspace, this is a no-op.

async fn check_admin(&self, auth_: &BearerToken) -> Result<(), Error>

Given an authenticated session, this endpoint returns a HTTP 204 if the authenticated user is an admin and HTTP 403 otherwise.

async fn is_email_allowed( &self, request: &IsEmailAllowedRequest, ) -> Result<IsEmailAllowedResponse, Error>

Checks if the email is allowed to register.

async fn is_email_allowed_okta( &self, request: &OktaRegistrationRequest, ) -> Result<OktaRegistrationResponse, Error>

Checks if the email is allowed to register, following Okta “registration inline hook” API.

async fn get_user_orgs( &self, request: &GetUserOrgsRequest, ) -> Result<GetUserOrgsResponse, Error>

Provides an OIDC ID token to get the orgs that the user is a member of. Throws NotAuthorized if the ID token is invalid or if the OIDC provider is not known.

async fn get_access_token( &self, request: &GetAccessTokenRequest, ) -> Result<GetAccessTokenResponse, Error>

Provide an OIDC ID token to get a Nominal access token suitable for making API requests. Its expiry will match that of the input ID token, capped at 24h. TODO(MGMT-933): reduce this duration. Throws NotAuthorized if the ID token is invalid or if the OIDC provider is not known.

async fn refresh_access_token( &self, request: &RefreshAccessTokenRequest, ) -> Result<RefreshAccessTokenResponse, Error>

Given an authenticated session, provide an OIDC access token to get a Nominal access token suitable for making API requests. Its expiry will match that of the input access token, capped at 24h. TODO(MGMT-933): reduce this duration. Throws NotAuthorized if the access token is invalid or if the OIDC provider is not known.

async fn create_api_key( &self, auth_: &BearerToken, request: &CreateApiKeyRequest, ) -> Result<CreateApiKeyResponse, Error>

Provide a long-lived API key for making API requests. The API key is irretrievable after initial creation.

async fn list_api_keys_in_org( &self, auth_: &BearerToken, request: &ListApiKeyRequest, ) -> Result<ListApiKeyResponse, Error>

List all API keys in the organization.

async fn list_user_api_keys( &self, auth_: &BearerToken, request: &ListApiKeyRequest, ) -> Result<ListApiKeyResponse, Error>

List all API keys for the user.

async fn revoke_api_key( &self, auth_: &BearerToken, rid: &ApiKeyRid, ) -> Result<(), Error>

Delete an API key.