Struct StepUpPolicy 

pub struct StepUpPolicy {
    pub enabled: bool,
    pub floors: Vec<StepUpFloor>,
}

The relying party’s system-wide step-up policy.

Ships disabled. A freshly-provisioned VTA has no registered approver and could not otherwise be administered (it could not even register the first approver), so until an operator turns it on every operation proceeds at AAL1. Mirrors the auth/step-up/policy/0.1 payload; the VTA serializes it under [auth.step_up] in its config.

Fields

enabled: bool

Master switch. false (the default) ⇒ step-up is NOT enforced anywhere; every operation proceeds at AAL1 regardless of floors.

floors: Vec<StepUpFloor>

Per-operation-class floors. Empty ⇒ nothing is gated even when enabled.

Implementations

impl StepUpPolicy

pub fn floor_for(&self, operation: &str) -> StepUpMode

Resolve the system-floor mode for an operation-class: the most specific matching floor, else the * catch-all, else None. Always None when the policy is disabled.

pub fn floor_record(&self, operation: &str) -> Option<&StepUpFloor>

The matching floor record (exact match preferred over the * catch-all), or None when disabled or unmatched. Carries the allow_aal1_if_non_escalating flag for the carve-out.

Trait Implementations

impl Clone for StepUpPolicy

fn clone(&self) -> StepUpPolicy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for StepUpPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for StepUpPolicy

fn default() -> StepUpPolicy

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for StepUpPolicy

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for StepUpPolicy

impl PartialEq for StepUpPolicy

fn eq(&self, other: &StepUpPolicy) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for StepUpPolicy

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for StepUpPolicy