Struct NativeAuthProvider 

pub struct NativeAuthProvider { /* private fields */ }

Implementations

impl NativeAuthProvider

pub fn new(guard: Arc<PairingGuard>) -> Self

Wrap the daemon’s canonical live pairing authority. Callers must pass the SAME guard instance the gateway serves /pair and revocation from — constructing a second guard from a config snapshot would fork the authority.

pub fn guard(&self) -> &Arc<PairingGuard>

The live authority, for connection-scoped liveness re-checks (an established connection stores only the token’s SHA-256 hash and consults this guard before privileged operations).

Trait Implementations

impl AuthProvider for NativeAuthProvider

fn name(&self) -> &str

Stable provider name = its config selection key (e.g. "native", "peercred", "oidc.corp" for [oidc.corp]). Unique within a registry; the handshake selects a provider by this name.

fn method(&self) -> AuthMethod

The AuthMethod this provider attests on success (also what it advertises in the handshake).

fn accepts(&self, credential: &Credential) -> bool

Whether this provider can attempt the given credential kind. Used to reject a mis-kinded credential before verify, and to route transport-intrinsic credentials — never to try one credential across providers.

fn verify<'life0, 'life1, 'async_trait>( &'life0 self, credential: &'life1 Credential, ) -> Pin<Box<dyn Future<Output = AuthOutcome> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Verify the credential into an identity. Fail-closed.