Enum AuthError 

pub enum AuthError {
    PasswordHash(Error),
    Sqlx(Error),
    Write(WriteError),
    InvalidCredentials,
    WeakPassword(Vec<String>),
    Runtime(String),
    Session(String),
    Template(String),
    Mail(String),
    InvalidChallenge,
}

Errors the auth helpers can produce. Kept narrow at M9 v1 so the surface is easy to handle in one match arm.

Variants

PasswordHash(Error)

argon2 produced or failed to parse a password hash. Carries the raw error so the diagnostic includes argon2’s own message.

Sqlx(Error)

sqlx error executing one of the helper queries.

Write(WriteError)

ORM write error — create, update_values, etc.

InvalidCredentials

authenticate was called with credentials that don’t match any active user. Returned for both “no such user” and “wrong password” so a caller can’t tell which from the error alone.

WeakPassword(Vec<String>)

The plaintext password failed one or more password-strength validators (see crate::password_validation). Carries every human-readable reason so the route / form can show the full list.

This is NOT produced by the low-level creation helpers anymore (create_user / create_user_with_flags / create_superuser / set_password are all low-level and do not validate). It is constructed at the registration boundary — the register route calls crate::validate_password up front and wraps any failure in this variant, which the route layer then maps to 400. A custom signup flow that wants the same behaviour follows the same pattern.

Runtime(String)

A blocking task offloaded to the tokio blocking pool (argon2 hashing / verification via hash_password_async / verify_password_async) failed to join — i.e. the task panicked or was cancelled. Carries the JoinError’s message. A panic in the hash worker is a real error, surfaced rather than swallowed.

Session(String)

A session-layer error surfaced through one of the auth helpers (logout, etc.). Carries the session error’s display string so callers match a single AuthError type without importing umbral_sessions::SessionError.

Template(String)

Template rendering failed (e.g. a missing template file or a syntax error). Carries the minijinja error message.

Mail(String)

The ambient mailer failed to accept the message for delivery. Carries the AuthMailError display string.

InvalidChallenge

A challenge lookup or verification failed. Returned for ALL failure arms in the verification flows (no such user, no active challenge, attempt cap reached, wrong code) so a caller can’t distinguish which arm fired — prevents account enumeration.

Trait Implementations

impl Debug for AuthError

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for AuthError

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Error for AuthError

fn source(&self) -> Option<&(dyn Error + 'static)>

Returns the lower-level source of this error, if any.

fn description(&self) -> &str

👎Deprecated since 1.42.0:

use the Display impl or to_string()

fn cause(&self) -> Option<&dyn Error>

👎Deprecated since 1.33.0:

replaced by Error::source, which can support downcasting

fn provide<'a>(&'a self, request: &mut Request<'a>)

🔬This is a nightly-only experimental API. (error_generic_member_access)

Provides type-based access to context intended for error reports.

impl From<Error> for AuthError

fn from(e: Error) -> Self

Converts to this type from the input type.

impl From<Error> for AuthError

fn from(e: Error) -> Self

Converts to this type from the input type.

impl From<WriteError> for AuthError

fn from(e: WriteError) -> Self

Converts to this type from the input type.