Enum AuthMode 

pub enum AuthMode {
    None,
    Bearer {
        tokens: HashMap<String, AuthSubject>,
    },
    Jwt {
        pkcs1_pubkey_der: Vec<u8>,
        expected_issuer: Option<String>,
    },
    Mtls,
    SaslPlain {
        users: HashMap<String, String>,
    },
}

Auth-Mode pro Daemon (CLI --auth-mode <MODE>).

Variants

None

Keine Auth. Subject = “anonymous”.

Bearer

Bearer-Token-Vergleich (HTTP-Header Authorization: Bearer …). Multi-Token via Map token → subject.

Fields

tokens: HashMap<String, AuthSubject>

Mapping vom Token-String auf das resultierende Subject.

Jwt

JWT — RS256-Signature-Validation gegen RSA-Public-Key (DER-Bytes wie aus RsaPublicKey::to_pkcs1_der).

Fields

pkcs1_pubkey_der: Vec<u8>

PKCS#1-DER des RSA-Public-Keys.

expected_issuer: Option<String>

Optional Issuer-Match (iss-Claim).

Mtls

mTLS — Identity wird vom TLS-Layer (Client-Cert) geliefert, nicht von dieser Funktion. AuthMode::validate mit Mtls erwartet presented_subject = Some(...).

SaslPlain

SASL-PLAIN — username\0username\0password-Frame, mit Map username → password.

Fields

users: HashMap<String, String>

Mapping user → password.

Implementations

impl AuthMode

pub fn validate(&self, input: &AuthInput<'_>) -> Result<AuthSubject, AuthError>

Validate. Liefert das Subject oder einen AuthError.

Errors

AuthError mit Sub-Variante.

Trait Implementations

impl Clone for AuthMode

fn clone(&self) -> AuthMode

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuthMode

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.