Trait AuthExt 

pub trait AuthExt {
    // Required methods
    fn current_user(&self) -> Option<&CurrentUser>;
    fn require_current_user(&self) -> Result<&CurrentUser>;
    fn profile(&self) -> Result<&CurrentUser>;
    fn require_permission(&self, slug: &str) -> Result<&CurrentUser>;
    fn require_role(&self, slug: &str) -> Result<&CurrentUser>;
    fn password_confirmed(&self) -> bool;
    fn can<P: Policy<R> + Default, R>(
        &self,
        ability: Ability,
        resource: &R,
    ) -> bool;
    fn authorize<P: Policy<R> + Default, R>(
        &self,
        ability: Ability,
        resource: &R,
    ) -> Result<&CurrentUser>;
    fn authorize_with(
        &self,
        f: impl FnOnce(&CurrentUser) -> bool,
    ) -> Result<&CurrentUser>;
    fn login_user(&mut self, user: CurrentUser);
    fn logout_user(&mut self);
    fn logout_other_sessions(&self) -> impl Future<Output = Result<u64>> + Send;
    fn logout_all_sessions(
        &mut self,
    ) -> impl Future<Output = Result<u64>> + Send;
}

Request helpers for RBAC (CurrentUser from Fortify / Passport session).

Required Methods

fn current_user(&self) -> Option<&CurrentUser>

fn require_current_user(&self) -> Result<&CurrentUser>

fn profile(&self) -> Result<&CurrentUser>

Alias for Self::require_current_user.

fn require_permission(&self, slug: &str) -> Result<&CurrentUser>

fn require_role(&self, slug: &str) -> Result<&CurrentUser>

fn password_confirmed(&self) -> bool

fn can<P: Policy<R> + Default, R>(&self, ability: Ability, resource: &R) -> bool

Check a crate::Policy ability against resource.

fn authorize<P: Policy<R> + Default, R>( &self, ability: Ability, resource: &R, ) -> Result<&CurrentUser>

Like Self::can, but returns Error::Forbidden on deny.

fn authorize_with( &self, f: impl FnOnce(&CurrentUser) -> bool, ) -> Result<&CurrentUser>

Custom predicate authorization.

fn login_user(&mut self, user: CurrentUser)

Programmatic login: rotate session, persist passport user id, set CurrentUser.

let cu = load_current_user(db, id).await?.unwrap();
req.login_user(cu);

fn logout_user(&mut self)

Clear Fortify/Passport session auth (pending 2FA, password confirm, CurrentUser).

fn logout_other_sessions(&self) -> impl Future<Output = Result<u64>> + Send

Kill every other device/session for the current user; keep this cookie.

fn logout_all_sessions(&mut self) -> impl Future<Output = Result<u64>> + Send

Kill all sessions for the current user, including this one.

Dyn Compatibility

This trait is not dyn compatible.

In older versions of Rust, dyn compatibility was called "object safety".

Implementations on Foreign Types

impl AuthExt for Request

fn current_user(&self) -> Option<&CurrentUser>

fn require_current_user(&self) -> Result<&CurrentUser>

fn profile(&self) -> Result<&CurrentUser>

fn require_permission(&self, slug: &str) -> Result<&CurrentUser>

fn require_role(&self, slug: &str) -> Result<&CurrentUser>

fn password_confirmed(&self) -> bool

fn can<P: Policy<R> + Default, R>(&self, ability: Ability, resource: &R) -> bool

fn authorize<P: Policy<R> + Default, R>( &self, ability: Ability, resource: &R, ) -> Result<&CurrentUser>

fn authorize_with( &self, f: impl FnOnce(&CurrentUser) -> bool, ) -> Result<&CurrentUser>

fn login_user(&mut self, user: CurrentUser)

fn logout_user(&mut self)

async fn logout_other_sessions(&self) -> Result<u64>

async fn logout_all_sessions(&mut self) -> Result<u64>

Implementors