Struct FnAuthentication 

pub struct FnAuthentication { /* private fields */ }

Authentication from a user-supplied async closure. Keeps the shape pluggable without dragging session / basic / JWT crates into umbral-rest itself.

// Session-cookie auth via umbral-sessions:
RestPlugin::default().authenticate(FnAuthentication::new(|headers| async move {
    let user = umbral_auth::current_user(&headers).await.ok().flatten()?;
    Some(Identity::user(user.id).with_staff(user.is_staff))
}));

// HTTP Basic Auth against umbral-auth:
RestPlugin::default().authenticate(FnAuthentication::new(|headers| async move {
    let (user, pass) = umbral::auth::parse_basic_credentials(&headers)?;
    let auth_user = umbral_auth::authenticate(&user, &pass).await.ok()?;
    Some(Identity::user(auth_user.id).with_staff(auth_user.is_staff))
}));

The closure takes an owned HeaderMap (cheap, internal Bytes references). That lets the future capture the headers without fighting lifetimes.

Implementations

impl FnAuthentication

pub fn new<F, Fut>(f: F) -> Self

where F: Fn(HeaderMap) -> Fut + Send + Sync + 'static, Fut: Future<Output = Option<Identity>> + Send + 'static,

Wrap an async closure as an Authentication. The closure receives a cloned HeaderMap and returns Option<Identity>.

Trait Implementations

impl Authentication for FnAuthentication

fn authenticate<'life0, 'life1, 'async_trait>( &'life0 self, headers: &'life1 HeaderMap, ) -> Pin<Box<dyn Future<Output = Option<Identity>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Try to identify the caller. None means “anonymous”; the permission check decides whether to allow that.

fn security_scheme(&self) -> Option<(String, Value)>

OpenAPI securitySchemes entry this backend contributes — Some((name, scheme_value)) for documented schemes, None to skip.

fn security_schemes_all(&self) -> Vec<(String, Value)>

All securitySchemes entries the backend (and any children it might wrap) contributes. The default impl returns self.security_scheme().into_iter().collect() — fine for every leaf backend. ChainAuthentication overrides to walk every child so the OpenAPI plugin can publish the full list.

fn is_anonymous(&self) -> bool

True when this backend never identifies anyone — every request is anonymous (NoAuthentication). Used only by the boot-time security warning (WEB-1); defaults to false so a real backend is never mistaken for the no-op.

impl Clone for FnAuthentication

fn clone(&self) -> FnAuthentication

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for FnAuthentication

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.