Enum AuthPolicy 

pub enum AuthPolicy {
    Public,
    Authenticated,
    Owner,
    HasRole(Vec<String>),
    ServiceOnly,
    AdminOnly,
    And(Vec<AuthPolicy>),
    Or(Vec<AuthPolicy>),
    Custom(fn(&AuthContext) -> bool),
}

Authorization policy for an operation

Variants

Public

Public access (no auth required)

Authenticated

Any authenticated user

Owner

Owner of the resource only

HasRole(Vec<String>)

User must have one of these roles

ServiceOnly

Service-to-service only

AdminOnly

Admin only

And(Vec<AuthPolicy>)

Combination of policies (AND)

Or(Vec<AuthPolicy>)

Combination of policies (OR)

Custom(fn(&AuthContext) -> bool)

Custom policy function

Implementations

impl AuthPolicy

pub fn check(&self, context: &AuthContext) -> bool

Check if auth context satisfies this policy

pub fn parse_policy(s: &str) -> Self

Parse policy from string (for YAML config)

Trait Implementations

impl Clone for AuthPolicy

fn clone(&self) -> AuthPolicy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuthPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.