Struct PeerAllowlist 

pub struct PeerAllowlist { /* private fields */ }

Membership policy: which peer subject names are allowed to participate in the replication group.

Construct via PeerAllowlist::new from a list of expected subject names. Names are normalised to lowercase at construction time so PeerAllowlist::contains is case-insensitive.

Implementations

impl PeerAllowlist

pub fn new<I, S>(names: I) -> Self

where I: IntoIterator<Item = S>, S: AsRef<str>,

Build an allowlist from any iterable of subject-name strings. Names are stored lowercased; duplicates and empty strings are filtered out.

An allowlist with zero entries means “no peer is authorised”, which is a valid (if useless) state — the caller should treat zero-entry allowlists as a configuration error before constructing the verifier.

pub fn len(&self) -> usize

Number of unique entries in the allowlist.

pub fn is_empty(&self) -> bool

true iff the allowlist is empty (no peers authorised).

pub fn contains(&self, name: &str) -> bool

true iff name is exactly equal to some entry, case-insensitive. Wildcards are NOT supported.

pub fn contains_any<I, S>(&self, names: I) -> bool

where I: IntoIterator<Item = S>, S: AsRef<str>,

true iff ANY of names is in the allowlist. The caller passes every name extracted from the peer cert (subject CN + each SAN DNS entry); membership is granted if at least one matches.

pub fn iter(&self) -> impl Iterator<Item = &str>

Read-only iterator over the lowercased entries. Order is BTreeSet order (lexicographic).

Trait Implementations

impl Clone for PeerAllowlist

fn clone(&self) -> PeerAllowlist

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for PeerAllowlist

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for PeerAllowlist

fn default() -> PeerAllowlist

Returns the “default value” for a type.