Enum AuthOutcome 

pub enum AuthOutcome {
    Authenticated(Principal),
    Trusted(Principal),
    Denied {
        reason: DenyReason,
    },
}

The single result every auth surface returns. Misroute/timeout/malformed ⇒ AuthOutcome::Denied, NEVER a silent allow.

Variants

Authenticated(Principal)

A distinct identity source authenticated the caller.

Trusted(Principal)

An explicitly-trusted connection with no distinct IdP principal — carries the Principal::shared_operator sentinel so callers never branch on Option.

Denied

The credential was rejected.

Fields

reason: DenyReason

Implementations

impl AuthOutcome

pub fn principal(&self) -> Option<&Principal>

The bound principal if the outcome allows the connection (authenticated or trusted), else None.

pub fn is_allowed(&self) -> bool

Whether the connection is allowed to proceed at all (still subject to per-method grant checks downstream).

Trait Implementations

impl Clone for AuthOutcome

fn clone(&self) -> AuthOutcome

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuthOutcome

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for AuthOutcome

impl PartialEq for AuthOutcome

fn eq(&self, other: &AuthOutcome) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for AuthOutcome