Struct RequestContext

Source

pub struct RequestContext {
    pub source_ip: Option<IpAddr>,
    pub user_agent: Option<String>,
    pub request_time: Option<SystemTime>,
    pub secure_transport: bool,
    pub existing_object_tags: Option<TagSet>,
    pub request_object_tags: Option<TagSet>,
    pub extra: HashMap<String, String>,
}

Expand description

Per-request context fed into the policy evaluator. Caller is expected to fill what’s available; missing fields make any Condition that depends on them fail (= statement skipped, never silently allowed).

Fields§

§source_ip: Option<IpAddr>§user_agent: Option<String>§request_time: Option<SystemTime>§secure_transport: bool§existing_object_tags: Option<TagSet>

v0.6 #39: tags currently attached to the object the request targets (resolved by the caller via TagManager ahead of evaluate_with). Surfaced to policy via the s3:ExistingObjectTag/<key> condition key. None here is treated identically to “no tags exist” — every ExistingObjectTag clause then fails.

§request_object_tags: Option<TagSet>

v0.6 #39: tags carried in the request itself (PutObject’s x-amz-tagging URL-encoded header, or PutObjectTagging’s Tagging body). Surfaced to policy via the s3:RequestObjectTag/<key> condition key.

§extra: HashMap<String, String>

Generic key → value map for any aws:* or s3:* context key not covered by the typed fields above (keeps the door open for any key the caller wants to plumb without changing the struct).

RequestContext

Struct RequestContext Copy item path

Fields§

Trait Implementations§

impl Clone for RequestContext

fn clone(&self) -> RequestContext

fn clone_from(&mut self, source: &Self)

impl Debug for RequestContext

fn fmt(&self, f: &mut Formatter<'_>) -> Result

impl Default for RequestContext

fn default() -> RequestContext

Auto Trait Implementations§

impl Freeze for RequestContext

impl RefUnwindSafe for RequestContext

impl Send for RequestContext

impl Sync for RequestContext

impl Unpin for RequestContext

impl UnsafeUnpin for RequestContext

impl UnwindSafe for RequestContext

Blanket Implementations§

impl<T> Any for Twhere T: 'static + ?Sized,

fn type_id(&self) -> TypeId

impl<'a, T, E> AsTaggedExplicit<'a, E> for Twhere T: 'a,

fn explicit(self, class: Class, tag: u32) -> TaggedParser<'a, Explicit, Self, E>

impl<'a, T, E> AsTaggedImplicit<'a, E> for Twhere T: 'a,

fn implicit( self, class: Class, constructed: bool, tag: u32, ) -> TaggedParser<'a, Implicit, Self, E>

impl<T> Borrow<T> for Twhere T: ?Sized,

fn borrow(&self) -> &T

impl<T> BorrowMut<T> for Twhere T: ?Sized,

fn borrow_mut(&mut self) -> &mut T

impl<ST, DT> CastableFrom<ST, Initialized, Initialized> for DTwhere ST: ?Sized, DT: ?Sized,

impl<ST, DT> CastableFrom<ST, Uninit, Uninit> for DTwhere ST: ?Sized, DT: ?Sized,

impl<T> CloneToUninit for Twhere T: Clone,

unsafe fn clone_to_uninit(&self, dest: *mut u8)

impl<T> From<T> for T

fn from(t: T) -> T

impl<T> FromExt for T

fn from_<T>(t: T) -> Selfwhere Self: From<T>,

impl<T> Instrument for T

fn instrument(self, span: Span) -> Instrumented<Self>

fn in_current_span(self) -> Instrumented<Self>

impl<T, U> Into<U> for Twhere U: From<T>,

fn into(self) -> U

impl<T> IntoEither for T

fn into_either(self, into_left: bool) -> Either<Self, Self>

fn into_either_with<F>(self, into_left: F) -> Either<Self, Self>where F: FnOnce(&Self) -> bool,

impl<T> IntoExt for T

fn into_<T>(self) -> Twhere Self: Into<T>,

impl<Unshared, Shared> IntoShared<Shared> for Unsharedwhere Shared: FromUnshared<Unshared>,

fn into_shared(self) -> Shared

impl<T> Pointable for T

const ALIGN: usize

type Init = T

unsafe fn init(init: <T as Pointable>::Init) -> usize

unsafe fn deref<'a>(ptr: usize) -> &'a T

unsafe fn deref_mut<'a>(ptr: usize) -> &'a mut T

unsafe fn drop(ptr: usize)

impl<T> PolicyExt for Twhere T: ?Sized,

fn and<P, B, E>(self, other: P) -> And<T, P>where T: Sized + Policy<B, E>, P: Policy<B, E>,

fn or<P, B, E>(self, other: P) -> Or<T, P>where T: Sized + Policy<B, E>, P: Policy<B, E>,

impl<T> Read<Exclusive, BecauseExclusive> for Twhere T: ?Sized,

impl<T> Same for T

type Output = T

impl<T> ToOwned for Twhere T: Clone,

type Owned = T

fn to_owned(&self) -> T

fn clone_into(&self, target: &mut T)

impl<T, U> TryFrom<U> for Twhere U: Into<T>,

type Error = Infallible

fn try_from(value: U) -> Result<T, <T as TryFrom<U>>::Error>

impl<T> TryFromExt for T

fn try_from_<T>(t: T) -> Result<Self, Self::Error>where Self: TryFrom<T>,

impl<T, U> TryInto<U> for Twhere U: TryFrom<T>,

type Error = <U as TryFrom<T>>::Error

fn try_into(self) -> Result<U, <U as TryFrom<T>>::Error>

impl<T> TryIntoExt for T

fn try_into_<T>(self) -> Result<T, Self::Error>where Self: TryInto<T>,

impl<V, T> VZip<V> for Twhere V: MultiLane<T>,

fn vzip(self) -> V

impl<T> WithSubscriber for T

Struct RequestContext

impl<T> Any for T
where T: 'static + ?Sized,

impl<'a, T, E> AsTaggedExplicit<'a, E> for T
where T: 'a,

impl<'a, T, E> AsTaggedImplicit<'a, E> for T
where T: 'a,

impl<T> Borrow<T> for T
where T: ?Sized,

impl<T> BorrowMut<T> for T
where T: ?Sized,

impl<ST, DT> CastableFrom<ST, Initialized, Initialized> for DT
where ST: ?Sized, DT: ?Sized,

impl<ST, DT> CastableFrom<ST, Uninit, Uninit> for DT
where ST: ?Sized, DT: ?Sized,

impl<T> CloneToUninit for T
where T: Clone,

fn from_<T>(t: T) -> Self
where Self: From<T>,

impl<T, U> Into<U> for T
where U: From<T>,

fn into_either_with<F>(self, into_left: F) -> Either<Self, Self>
where F: FnOnce(&Self) -> bool,

fn into_<T>(self) -> T
where Self: Into<T>,

impl<Unshared, Shared> IntoShared<Shared> for Unshared
where Shared: FromUnshared<Unshared>,

impl<T> PolicyExt for T
where T: ?Sized,

fn and<P, B, E>(self, other: P) -> And<T, P>
where T: Sized + Policy<B, E>, P: Policy<B, E>,

fn or<P, B, E>(self, other: P) -> Or<T, P>
where T: Sized + Policy<B, E>, P: Policy<B, E>,

impl<T> Read<Exclusive, BecauseExclusive> for T
where T: ?Sized,

impl<T> ToOwned for T
where T: Clone,

impl<T, U> TryFrom<U> for T
where U: Into<T>,

fn try_from_<T>(t: T) -> Result<Self, Self::Error>
where Self: TryFrom<T>,

impl<T, U> TryInto<U> for T
where U: TryFrom<T>,

fn try_into_<T>(self) -> Result<T, Self::Error>
where Self: TryInto<T>,

impl<V, T> VZip<V> for T
where V: MultiLane<T>,

fn with_subscriber<S>(self, subscriber: S) -> WithDispatch<Self>
where S: Into<Dispatch>,