Enum BrowserTokenError 

pub enum BrowserTokenError {
    Decode(String),
    WrongType {
        expected: TokenType,
        got: String,
    },
    Expired,
    NotYetValid,
    BadRole(String),
    Revoked,
}

Reasons a token is refused. Kept distinct so the WS handshake and the refresh endpoint can log why without leaking detail to the client.

Variants

Decode(String)

Signature, issuer, audience, or structural decode failure. The string is for server-side logs only.

WrongType

A refresh token was presented where an access token was required, or vice-versa. A refresh token must never authenticate a session directly — it only mints access tokens.

Fields

expected: TokenType

got: String

Expired

exp is at or before now.

NotYetValid

nbf is in the future.

BadRole(String)

The embedded role claim is not a known Role.

Revoked

A structurally valid refresh token whose jti is no longer live: the browser logged out, the token was rotated, or every token for the principal was revoked. Distinct from Self::Expired so logs tell “credential withdrawn” apart from “credential aged out”.

Trait Implementations

impl Clone for BrowserTokenError

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for BrowserTokenError

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for BrowserTokenError

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for BrowserTokenError

impl Error for BrowserTokenError

fn source(&self) -> Option<&(dyn Error + 'static)>

Returns the lower-level source of this error, if any.

fn description(&self) -> &str

👎Deprecated since 1.42.0:

use the Display impl or to_string()

fn cause(&self) -> Option<&dyn Error>

👎Deprecated since 1.33.0:

replaced by Error::source, which can support downcasting

fn provide<'a>(&'a self, request: &mut Request<'a>)

🔬This is a nightly-only experimental API. (error_generic_member_access)

Provides type-based access to context intended for error reports.

impl PartialEq for BrowserTokenError

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for BrowserTokenError