Enum AuthError 

pub enum AuthError {
    MissingHeader,
    InvalidFormat,
    InvalidToken(String),
    TokenExpired,
    MissingClaim(String),
    InvalidApiKey,
    ApiKeyDisabled,
    ApiKeyExpired,
    TenantSuspended,
    JwtNotConfigured,
    UnsupportedAuthMethod,
    Database(Error),
    Internal(String),
}

Authentication errors.

Variants

MissingHeader

No Authorization header at all.

InvalidFormat

The header is present but not Bearer <jwt> or ApiKey <key>.

InvalidToken(String)

A JWT that does not verify, with the reason.

TokenExpired

A JWT whose exp has passed.

MissingClaim(String)

A JWT missing a claim this proxy needs, named.

InvalidApiKey

An API key that matches no stored hash.

ApiKeyDisabled

A key that exists but has been revoked.

ApiKeyExpired

A key past its expires_at.

TenantSuspended

The credential is good but its tenant may not act.

JwtNotConfigured

A JWT was presented and no signing secret is configured, so it cannot be verified. Refused rather than trusted.

UnsupportedAuthMethod

An Authorization scheme this proxy does not implement.

Database(Error)

The lookup itself failed. Ours, not the caller’s – reported as a 500 rather than a 401, so an outage does not read as a bad credential.

Internal(String)

Some other failure of ours. Logged; the caller sees a generic 500.

Trait Implementations

impl Debug for AuthError

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl From<Error> for AuthError

fn from(err: Error) -> Self

Converts to this type from the input type.

impl From<ProxyError> for AuthError

fn from(err: ProxyError) -> Self

Converts to this type from the input type.

impl IntoResponse for AuthError

fn into_response(self) -> Response

Create a response.