Struct TokenPolicy 

pub struct TokenPolicy<'a> { /* private fields */ }

What the request is allowed to be, given the resource it reached and the revision it negotiated.

Two deployment facts and one spec fact, all of which change whether a token is checked at all. Bundled because passing three arguments to every call site invites two of them being forgotten.

Implementations

impl<'a> TokenPolicy<'a>

pub const fn new(resource: &'a ResourceUri, model: AuthorizationModel) -> Self

A policy that accepts any issuer.

Examples

use protocol_droid::domain::{ProtocolVersion, authorization_model};
use protocol_droid::domain::mcp::ResourceUri;
use protocol_droid::application::oauth::TokenPolicy;

let resource = ResourceUri::new("https://example.com/mcp")?;
let policy = TokenPolicy::new(&resource, authorization_model(ProtocolVersion::V2026_07_28));
assert!(policy.accepts_any_issuer());

pub fn with_expected_issuer(self, issuer: impl Into<Arc<str>>) -> Self

Requires tokens to name issuer, refusing any minted by anyone else.

pub const fn accepts_any_issuer(&self) -> bool

Whether an issuer check will be made.

Trait Implementations

impl<'a> Clone for TokenPolicy<'a>

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<'a> Debug for TokenPolicy<'a>

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.