Enum OAuthScopeContext 

#[non_exhaustive]
pub enum OAuthScopeContext {
    NonOauth,
    Scopes(Vec<String>),
}

I10c-β2(R3 MUST-FIX 修复):调用路径的 OAuth 上下文,显式区分“非 OAuth“与“OAuth + scope“。

出现在 Firewall::evaluate 签名里作为必填参数,强制调用方每次调用都明确选择, 防止 HTTP MCP 集成点意外漏配 scope 导致静默绕过。

• OAuthScopeContext::NonOauth —— stdio MCP / 本地工具 / 不走 OAuth 的任何路径
• OAuthScopeContext::Scopes —— HTTP MCP + OAuth access token,scope 来自 vigil_http_auth::ResolvedAccessToken::scope_set(空集也必须显式 Scopes(vec![]), 触发 ScopeNotInAllowList 的 fail-closed 分支)

Variants (Non-exhaustive)

Non-exhaustive enums could have additional variants added in future. Therefore, when matching against variants of non-exhaustive enums, an extra wildcard arm must be added to account for any future variants.

NonOauth

非 OAuth 路径,ScopeNotInAllowList 不适用

Scopes(Vec<String>)

OAuth 路径 + token 携带的 scope 集合(可空 → fail-closed)

Trait Implementations

impl Clone for OAuthScopeContext

fn clone(&self) -> OAuthScopeContext

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for OAuthScopeContext

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Eq for OAuthScopeContext

impl PartialEq for OAuthScopeContext

fn eq(&self, other: &OAuthScopeContext) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for OAuthScopeContext