Enum KeyError 

pub enum KeyError {
    UnknownKey,
    UnknownAccount,
    AlreadyExists,
    ActiveKeyLimit {
        limit: NonZeroUsize,
    },
    Storage(StoreError),
}

Refusals from credential lifecycle operations.

Variants

UnknownKey

No such credential. Never a silent no-op — an operator revoking a key that does not exist has either the wrong id or a false belief about what is live, and both are worth surfacing.

UnknownAccount

The credential’s account does not exist, so nothing could authenticate as it. Refused at issuance rather than producing a key that verifies and is then denied by every admission.

AlreadyExists

This key_id is already recorded. Issuance is never destructive, for the reason account creation is not (CreateAccountError): an overwrite would silently retire a live credential.

This is also the retry answer. A caller that supplies the key_id and loses the response resends the same one and is told the credential exists — which is the truth, and which discloses no secret. That is why issuance must never become an upsert (GL-121).

ActiveKeyLimit

The account already holds limit live credentials, so issuing another would exceed the bound the caller supplied.

“Live” excludes revoked keys and keys whose not_after has passed: a bound that counted expired credentials would strand an account behind keys nobody can authenticate with.

Fields

limit: NonZeroUsize

The bound the caller supplied.

Storage(StoreError)

A backend failure unrelated to domain rules; see StoreError.

Trait Implementations

impl Clone for KeyError

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for KeyError

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for KeyError

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for KeyError

impl Error for KeyError

fn source(&self) -> Option<&(dyn Error + 'static)>

Returns the lower-level source of this error, if any.

fn description(&self) -> &str

👎Deprecated since 1.42.0:

use the Display impl or to_string()

fn cause(&self) -> Option<&dyn Error>

👎Deprecated since 1.33.0:

replaced by Error::source, which can support downcasting

fn provide<'a>(&'a self, request: &mut Request<'a>)

🔬This is a nightly-only experimental API. (error_generic_member_access)

Provides type-based access to context intended for error reports.

impl From<StoreError> for KeyError

fn from(error: StoreError) -> Self

Converts to this type from the input type.

impl PartialEq for KeyError

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for KeyError