Enum AuthResult 

pub enum AuthResult {
    Authenticated {
        username: String,
        role: Role,
        source: AuthSource,
    },
    Anonymous,
    Denied(String),
}

Outcome of auth validation for an incoming request.

Variants

Authenticated

Fully authenticated with RBAC.

Fields

username: String

role: Role

source: AuthSource

Which auth path produced this identity. Defaults to Password for callers that haven’t been updated to set it explicitly, keeping backwards compatibility.

Anonymous

No credentials provided.

Denied(String)

Credentials were provided but rejected.

Implementations

impl AuthResult

pub fn password(username: impl Into<String>, role: Role) -> Self

Back-compat constructor for password auth — callers that predate the AuthSource field can keep passing (user, role).

pub fn from_cert(id: CertIdentity) -> Self

Build an AuthResult from a validated client certificate.

pub fn from_oauth(id: OAuthIdentity) -> Self

Build an AuthResult from a validated OAuth/OIDC token.

pub fn summary(&self) -> String

Short description suitable for logging.

pub fn is_authenticated(&self) -> bool

Whether this result represents a successfully identified caller.

Trait Implementations

impl Clone for AuthResult

fn clone(&self) -> AuthResult

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuthResult

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.