Skip to main content

ValidationHook

orbit_auth

Trait ValidationHook 

Source 
pub trait ValidationHook {
    // Required method
    fn check(&self, principal: &Principal, now: u64) -> Result<()>;

    // Provided method
    fn check_lapsed(&self, _: &Principal, _: u64) -> Result<()> { ... }
}
Expand description

Called after static validation on EVERY authentication, including cache hits.

A one-use policy must atomically consume (realm, issuer, jti) until expires_at. Fail closed with PolicyUnavailable if its authoritative store is unavailable. Revocation checks and application-specific current-state policy also belong here.

Required Methods§

Source

fn check(&self, principal: &Principal, now: u64) -> Result<()>

Provided Methods§

Source

fn check_lapsed(&self, _: &Principal, _: u64) -> Result<()>

Validator::validate_lapsed: policy for a credential past its own expiry. Hooks must opt in explicitly; the default fails closed.

Dyn Compatibility§

This trait is dyn compatible.

In older versions of Rust, dyn compatibility was called "object safety".

Implementors§