Enum AuthMethod 

pub enum AuthMethod {
    Pwd,
    Totp,
    RecoveryCode,
    Webauthn,
}

Authentication method that contributed to a session’s authentication. The variants map 1:1 to RFC 8176 AMR values.

Variants

Pwd

Username + password. Always present in a sui-id session.

Totp

TOTP authenticator app code.

RecoveryCode

One of the user’s pre-issued recovery codes.

Webauthn

WebAuthn assertion (passkey / hardware key).

Implementations

impl AuthMethod

pub fn as_amr(self) -> &'static str

The RFC 8176 AMR token for this method. These strings appear verbatim in the amr array of issued ID tokens; relying parties match on them.

pub fn is_second_factor(self) -> bool

Whether this method counts as a second factor — i.e. it is neither password nor a knowledge-only credential. Used to derive the ACR level.

pub fn is_phishing_resistant(self) -> bool

Whether this method is phishing-resistant in the sense that the credential cannot be replayed by an attacker who has captured the user’s keystrokes. WebAuthn is; TOTP is not (the 6-digit code is interceptable inside its 30-second window).

Trait Implementations

impl Clone for AuthMethod

fn clone(&self) -> AuthMethod

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for AuthMethod

impl Debug for AuthMethod

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for AuthMethod

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for AuthMethod

impl Hash for AuthMethod

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl PartialEq for AuthMethod

fn eq(&self, other: &AuthMethod) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for AuthMethod

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for AuthMethod