Struct IdentityOnly

Source

pub struct IdentityOnly;

Expand description

Identity-only: forwards the caller’s IdP-verified user identity and drops roles, capabilities, and metadata.

Recommended default. The callee learns who invoked it (so it can re-evaluate authorization against its own scopes per AUTHZ-S01 default-deny) without inheriting the caller’s authority. Fixes the confused-deputy class for any callee that reads raw_ctx.

Mirror of: HTTP cookies + per-page server-side authorization.

IdentityOnly

Struct IdentityOnly Copy item path

Trait Implementations§

impl Clone for IdentityOnly

fn clone(&self) -> IdentityOnly

fn clone_from(&mut self, source: &Self)

impl Debug for IdentityOnly

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

impl ForwardPolicy for IdentityOnly

fn name(&self) -> ForwardPolicyName

fn forward(&self, _ctx: &AuthContext, _site: &CallSite) -> ForwardDerivation

impl Copy for IdentityOnly

Auto Trait Implementations§

impl Freeze for IdentityOnly

impl RefUnwindSafe for IdentityOnly

impl Send for IdentityOnly

impl Sync for IdentityOnly

impl Unpin for IdentityOnly

impl UnsafeUnpin for IdentityOnly

impl UnwindSafe for IdentityOnly

Blanket Implementations§

impl<T> Any for Twhere T: 'static + ?Sized,

fn type_id(&self) -> TypeId

impl<T> Borrow<T> for Twhere T: ?Sized,

fn borrow(&self) -> &T

impl<T> BorrowMut<T> for Twhere T: ?Sized,

fn borrow_mut(&mut self) -> &mut T

impl<T> CloneToUninit for Twhere T: Clone,

unsafe fn clone_to_uninit(&self, dest: *mut u8)

impl<T> DynClone for Twhere T: Clone,

fn __clone_box(&self, _: Private) -> *mut ()

impl<T> From<T> for T

fn from(t: T) -> T

impl<T> Instrument for T

fn instrument(self, span: Span) -> Instrumented<Self>

fn in_current_span(self) -> Instrumented<Self>

impl<T, U> Into<U> for Twhere U: From<T>,

fn into(self) -> U

impl<T> Same for T

type Output = T

impl<T> ToOwned for Twhere T: Clone,

type Owned = T

fn to_owned(&self) -> T

fn clone_into(&self, target: &mut T)

impl<T, U> TryFrom<U> for Twhere U: Into<T>,

type Error = Infallible

fn try_from(value: U) -> Result<T, <T as TryFrom<U>>::Error>

impl<T, U> TryInto<U> for Twhere U: TryFrom<T>,

type Error = <U as TryFrom<T>>::Error

fn try_into(self) -> Result<U, <U as TryFrom<T>>::Error>

impl<V, T> VZip<V> for Twhere V: MultiLane<T>,

fn vzip(self) -> V

impl<T> WithSubscriber for T

fn with_subscriber<S>(self, subscriber: S) -> WithDispatch<Self>where S: Into<Dispatch>,

fn with_current_subscriber(self) -> WithDispatch<Self>

Struct IdentityOnly

impl<T> Any for T
where T: 'static + ?Sized,

impl<T> Borrow<T> for T
where T: ?Sized,

impl<T> BorrowMut<T> for T
where T: ?Sized,

impl<T> CloneToUninit for T
where T: Clone,

impl<T> DynClone for T
where T: Clone,

impl<T, U> Into<U> for T
where U: From<T>,

impl<T> ToOwned for T
where T: Clone,

impl<T, U> TryFrom<U> for T
where U: Into<T>,

impl<T, U> TryInto<U> for T
where U: TryFrom<T>,

impl<V, T> VZip<V> for T
where V: MultiLane<T>,

fn with_subscriber<S>(self, subscriber: S) -> WithDispatch<Self>
where S: Into<Dispatch>,