Struct AdminAuth 

pub struct AdminAuth { /* private fields */ }

Available on server only.

Authentication and authorization checker for admin panel.

This struct extracts authentication state from the HTTP request and provides methods to check authentication and permissions.

Implementations

impl AdminAuth

pub fn from_request(request: &ServerFnRequest) -> Self

Creates a new AdminAuth from a ServerFnRequest.

Arguments

• request - The server function request wrapper

Returns

A new AdminAuth instance

pub fn from_arc_request(request: &Arc<Request>) -> Self

Creates a new AdminAuth from an Arc<Request>.

Arguments

• request - The HTTP request

Returns

A new AdminAuth instance

pub fn auth_state(&self) -> Option<&AuthState>

Returns the AuthState if available.

pub fn is_authenticated(&self) -> bool

Checks if the user is authenticated.

Returns

true if the user is authenticated, false otherwise

pub fn is_staff(&self) -> bool

Checks if the user is a staff member (admin access).

Returns

true if the user is staff/admin, false otherwise

pub fn is_active(&self) -> bool

Checks if the user is active.

Returns

true if the user is active, false otherwise

pub fn user_id(&self) -> Option<&str>

Returns the user ID if authenticated.

pub fn require_authenticated(&self) -> Result<(), ServerFnError>

Requires authentication, returning an error if not authenticated.

Errors

Returns ServerFnError with status 401 if not authenticated

pub fn require_staff(&self) -> Result<(), ServerFnError>

Requires staff (admin) status, returning an error if not staff.

Errors

Returns ServerFnError with status 403 if not staff

pub async fn require_model_permission( &self, model_admin: &dyn ModelAdmin, user: &dyn AdminUser, permission: ModelPermission, ) -> Result<(), ServerFnError>

Checks model-level permission using ModelAdmin, returning an error if denied.

This method first verifies staff status, then delegates to the ModelAdmin’s permission method for the specified permission type.

The caller is responsible for providing the authenticated user object extracted from the DI context via AdminAuthenticatedUser. The user is passed as a &dyn AdminUser trait object, which is produced by the type-erased user loader registered during admin route setup.

Arguments

• model_admin - The model admin to check permissions against
• user - The authenticated user object as a trait object
• permission - The type of permission to check

Errors

Returns ServerFnError with status 401 if not authenticated, 403 if not staff or if model-level permission is denied