Module auth 

Structs

CallerAttribution

Role plus principal for one connection, resolved by the daemon and never taken from the request body.

Enums

CallerPrincipal

Who asked, as opposed to what they were allowed to do.

Constants

ADMIN_GROUP

BOOT_GROUP

DEV_GROUP

OBSERVER_GROUP

WHEEL_GROUP

Functions

default_token_path

Default path for the daemon token file.

denial_message

The message a caller sees when their role is too low for an action.

group_for_role

The group that grants role, i.e. the inverse of the private role_for_group mapping above.

highest_role_from_groups

token_role

Return the CallerRole granted to token-authenticated vsock connections.

validate_token_against_file

Validate presented_token against the token stored in token_path.