Struct AuthContext 

pub struct AuthContext { /* private fields */ }

Who is asking, and what they hold.

Built once per request at the transport boundary from whatever the peer proved, and then read — never mutated — by the visibility predicate.

Implementations

impl AuthContext

pub fn anonymous() -> Self

An unauthenticated principal holding nothing.

Distinct from AuthContext::new with a name and no scopes in exactly one way, and it is worth being explicit about the difference: an anonymous caller is a peer that has not presented credentials, while a named principal holding nothing is a peer that presented credentials which granted nothing. Both see the same primitives. The name differs so a trace can say which happened.

pub fn new(principal: impl Into<Arc<str>>, scopes: ScopeSet) -> Self

A named principal holding scopes.

pub fn unrestricted(principal: impl Into<Arc<str>>) -> Self

A principal holding every scope. For a server with no authorization of its own, which is the common case before T16.

pub fn principal(&self) -> &str

Who is asking.

pub const fn scopes(&self) -> ScopeSet

What they hold.

pub const fn holds(&self, required: ScopeSet) -> bool

Whether the principal holds every scope in required.

Trait Implementations

impl Clone for AuthContext

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuthContext

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for AuthContext

fn default() -> Self

Returns the “default value” for a type.

impl Eq for AuthContext

impl PartialEq for AuthContext

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for AuthContext