Skip to main content

DenyReason

zeroclaw_api::principal

Enum DenyReason

#[non_exhaustive]pub enum DenyReason {
    NoCredential,
    BadCredential,
    TokenExpired,
    MfaRequired,
    NotEntitled,
    AliasNotEntitled,
    UnknownProvider,
    Misconfigured,
}

Expand description

Why a credential was rejected. Fail-closed: any ambiguity ⇒ a Denied variant, never a silent allow.

Variants (Non-exhaustive)§

This enum is marked as non-exhaustive

Non-exhaustive enums could have additional variants added in future. Therefore, when matching against variants of non-exhaustive enums, an extra wildcard arm must be added to account for any future variants.

NoCredential

No credential was presented.

BadCredential

A credential was presented but failed verification.

TokenExpired

The credential/session has expired.

MfaRequired

A second factor is required and was not satisfied.

NotEntitled

The credential authenticated but its claims/roster entry map to no permission profile, so the principal would hold no grants at all.

AliasNotEntitled

The principal is not entitled to the requested agent alias.

UnknownProvider

No provider matches the requested provider selection.

Misconfigured

The provider/config is misconfigured (fail closed, do not allow).

Trait Implementations§

impl Clone for DenyReason

fn clone(&self) -> DenyReason

Returns a duplicate of the value. Read more

1.0.0 (const: unstable) · §

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source. Read more

impl Copy for DenyReason

impl Debug for DenyReason

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter. Read more

impl<'de> Deserialize<'de> for DenyReason

fn deserialize<D>(deserializer: D) -> Result<Self, D::Error>
where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer. Read more

impl Eq for DenyReason

impl PartialEq for DenyReason

fn eq(&self, other: &DenyReason) -> bool

Equality operator ==. Read more

1.0.0 (const: unstable) · §

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=. Read more

impl Serialize for DenyReason

fn serialize<S>(&self, serializer: S) -> Result<S::Ok, S::Error>
where S: Serializer,

Serialize this value into the given Serde serializer. Read more

impl StructuralPartialEq for DenyReason

Auto Trait Implementations§

impl Freeze for DenyReason

impl RefUnwindSafe for DenyReason

impl Send for DenyReason

impl Sync for DenyReason

impl Unpin for DenyReason

impl UnsafeUnpin for DenyReason

impl UnwindSafe for DenyReason

Blanket Implementations§

impl<T> Any for T
where T: 'static + ?Sized,

fn type_id(&self) -> TypeId

Gets the TypeId of self. Read more

impl<T> Borrow<T> for T
where T: ?Sized,

fn borrow(&self) -> &T

Immutably borrows from an owned value. Read more

impl<T> BorrowMut<T> for T
where T: ?Sized,

fn borrow_mut(&mut self) -> &mut T

Mutably borrows from an owned value. Read more

impl<T> CloneToUninit for T
where T: Clone,

unsafe fn clone_to_uninit(&self, dest: *mut u8)

🔬This is a nightly-only experimental API. (clone_to_uninit)

Performs copy-assignment from self to dest. Read more

impl<T> DeserializeOwned for T
where T: for<'de> Deserialize<'de>,

impl<T> DynClone for T
where T: Clone,

fn __clone_box(&self, _: Private) -> *mut ()

impl<T> From<T> for T

fn from(t: T) -> T

Returns the argument unchanged.

impl<T, U> Into<U> for T
where U: From<T>,

fn into(self) -> U

Calls U::from(self).

That is, this conversion is whatever the implementation of From<T> for U chooses to do.

impl<T> ToOwned for T
where T: Clone,

type Owned = T

The resulting type after obtaining ownership.

fn to_owned(&self) -> T

Creates owned data from borrowed data, usually by cloning. Read more

fn clone_into(&self, target: &mut T)

Uses borrowed data to replace owned data, usually by cloning. Read more

impl<T, U> TryFrom<U> for T
where U: Into<T>,

type Error = Infallible

The type returned in the event of a conversion error.

fn try_from(value: U) -> Result<T, <T as TryFrom<U>>::Error>

Performs the conversion.

impl<T, U> TryInto<U> for T
where U: TryFrom<T>,

type Error = <U as TryFrom<T>>::Error

The type returned in the event of a conversion error.

fn try_into(self) -> Result<U, <U as TryFrom<T>>::Error>

Performs the conversion.