Struct AuthorizationHandlerChain 

pub struct AuthorizationHandlerChain { /* private fields */ }

Authorization handler chain.

Executes handlers in sequence with fail-closed semantics. An allow grants access, ordinary denials may be followed by another authorization source, and operational errors stop evaluation immediately.

Example

use rocketmq_auth::{AclAuthorizationHandler, AuthorizationHandlerChain};
use std::sync::Arc;

let chain = AuthorizationHandlerChain::new()
    .add_handler(Arc::new(AclAuthorizationHandler::new(provider)));

// Execute the chain and consume both normal outcomes.
match chain.handle(&context).await? {
    AuthorizationDecision::Allow => proceed(),
    AuthorizationDecision::Deny(reason) => reject(reason),
}

Implementations

impl AuthorizationHandlerChain

pub fn new() -> Self

Create an empty handler chain.

pub fn add_handler(self, handler: Arc<dyn AuthorizationHandler>) -> Self

Add a handler to the end of the chain.

pub async fn handle( &self, context: &DefaultAuthorizationContext, ) -> AuthServiceResult<AuthorizationDecision>

Execute the authorization chain.

Handlers are executed in order until one allows the request, every handler denies it, or an operational failure occurs.

Returns

• Ok(AuthorizationDecision) for a final allow or deny
• Err(AuthServiceError) when evaluation cannot produce a decision

pub fn len(&self) -> usize

Get the number of handlers in the chain.

pub fn is_empty(&self) -> bool

Check if the chain is empty.

Trait Implementations

impl Default for AuthorizationHandlerChain

fn default() -> Self

Returns the “default value” for a type.