Enum AuthError 

pub enum AuthError {
    Unauthenticated,
    InvalidToken(String),
    MissingRole(String),
    Forbidden {
        required: Role,
        actual: Role,
    },
    Misconfigured(String),
}

Why authentication / authorization failed. Maps cleanly to HTTP status in the admin API: Unauthenticated / InvalidToken / MissingRole → 401; Forbidden → 403; Misconfigured is a server-config error surfaced at startup (never to a client).

Variants

Unauthenticated

No bearer token was presented.

InvalidToken(String)

A token was presented but failed validation (bad signature, expired, wrong issuer/audience, malformed).

MissingRole(String)

The token validated but carried no usable role claim.

Forbidden

The principal is authenticated but lacks the required role.

Fields

required: Role

The role the route requires.

actual: Role

The role the principal actually has.

Misconfigured(String)

The verifier is misconfigured (e.g. AUTH_MODE=jwt with no key). A startup/server error, never a client-facing one.

Trait Implementations

impl Clone for AuthError

fn clone(&self) -> AuthError

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuthError

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for AuthError

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for AuthError

impl Error for AuthError

fn source(&self) -> Option<&(dyn Error + 'static)>

Returns the lower-level source of this error, if any.

fn description(&self) -> &str

👎Deprecated since 1.42.0:

use the Display impl or to_string()

fn cause(&self) -> Option<&dyn Error>

👎Deprecated since 1.33.0:

replaced by Error::source, which can support downcasting

fn provide<'a>(&'a self, request: &mut Request<'a>)

🔬This is a nightly-only experimental API. (error_generic_member_access)

Provides type-based access to context intended for error reports.

impl PartialEq for AuthError

fn eq(&self, other: &AuthError) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for AuthError