Enum StepUpFailure 

#[non_exhaustive]
pub enum StepUpFailure {
    NotReported,
    Stale,
    AcrNotMet,
}

Available on crate feature consent only.

Why a host’s reported authentication did not satisfy an AuthenticationRequirement.

Fieldless on purpose, and not only for the size of it. The error_description these produce goes back to the CLIENT through the authorization response redirect (RFC 6749 section 4.1.2.1), and the client is not entitled to learn when the user last logged in or which acr they hold; “not fresh enough” is the whole of what it needs in order to decide to ask again.

Variants (Non-exhaustive)

Non-exhaustive enums could have additional variants added in future. Therefore, when matching against variants of non-exhaustive enums, an extra wildcard arm must be added to account for any future variants.

NotReported

The host reported no authentication at all, and the request asked about one.

Stale

The authentication is older than the request’s max_age.

AcrNotMet

The reported acr is not one of the requested acr_values (or none was reported).

Implementations

impl StepUpFailure

pub fn description(self) -> &'static str

The developer-facing description this failure carries onto the wire.

&'static str, so a refusal allocates nothing for it. The authorization endpoint is a path whose rate an unauthenticated caller sets, and an allocation per refusal there is a cost an attacker chooses.

pub fn error_response(self) -> ErrorResponse

The RFC 9470 section 3 error this failure is reported as.

insufficient_user_authentication is registered by RFC 9470 for the RESOURCE server’s challenge, and section 4 names no code for the authorization server’s own refusal. This crate uses the same one, deliberately, because it is the code the client has just been handed by the resource server and re-sending it says exactly the true thing: the authentication is still not sufficient. The alternative, a bare invalid_request, tells a client its parameters were malformed and invites it to retry the identical request.

Trait Implementations

impl Clone for StepUpFailure

fn clone(&self) -> StepUpFailure

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for StepUpFailure

impl Debug for StepUpFailure

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for StepUpFailure

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for StepUpFailure

impl Error for StepUpFailure

The other error-shaped types in this crate (crate::dpop::DpopFailure, crate::client_assertion::AssertionFailure, crate::mtls::MtlsRegistrationError) are all std::error::Error, and a host that puts one of them behind ? or in a Box<dyn Error> has to be able to do the same with this one. Display above is the whole implementation.

fn source(&self) -> Option<&(dyn Error + 'static)>

Returns the lower-level source of this error, if any.

fn description(&self) -> &str

👎Deprecated since 1.42.0:

use the Display impl or to_string()

fn cause(&self) -> Option<&dyn Error>

👎Deprecated since 1.33.0:

replaced by Error::source, which can support downcasting

fn provide<'a>(&'a self, request: &mut Request<'a>)

🔬This is a nightly-only experimental API. (error_generic_member_access)

Provides type-based access to context intended for error reports.

impl From<StepUpFailure> for ErrorResponse

fn from(failure: StepUpFailure) -> ErrorResponse

Converts to this type from the input type.

impl Hash for StepUpFailure

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl PartialEq for StepUpFailure

fn eq(&self, other: &StepUpFailure) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for StepUpFailure