Struct ProviderRegistry 

pub struct ProviderRegistry { /* private fields */ }

The configured set of providers, selected by name. Default-deny: an empty registry rejects everything, an unknown selection rejects, a mis-kinded credential rejects, and a selected provider’s denial is final.

Implementations

impl ProviderRegistry

pub fn new() -> Self

pub fn register(&mut self, provider: Arc<dyn AuthProvider>) -> Result<()>

Register a provider (boot-time wiring). Provider names are the selection keys, so a duplicate is ambiguous routing — refused rather than silently shadowed.

pub fn is_empty(&self) -> bool

true if no provider is configured (default-deny will reject all).

pub fn advertised_methods(&self) -> Vec<AuthMethod>

The methods this registry advertises (for the handshake authMethods).

pub fn names(&self) -> Vec<&str>

The configured provider names, in registration order — the enumeration surface exposed over RPC (no hardcoded provider lists). These are the valid resolve_named selections.

pub async fn resolve_named( &self, name: &str, credential: &Credential, ) -> AuthOutcome

Verify credential against the EXPLICITLY selected provider.

Fail-closed and authoritative: an unknown name, a missing credential, or a credential kind the selected provider does not accept is denied; and whatever the selected provider decides is final — a denial can never fall through to another provider that would have accepted the same credential (Rev 8: “failure is authoritative once a method and provider have been selected”).

pub async fn route_transport(&self, credential: &Credential) -> AuthOutcome

Route a transport-intrinsic credential (today: the kernel-supplied peer uid) to the ONE provider that handles its kind.

This is not a fallback scan: a credential whose format does not securely identify its provider (any bearer, any signature) is denied here — it must go through Self::resolve_named. Zero accepting providers deny; more than one accepting provider is ambiguous wiring and denies as misconfigured rather than picking silently.

Trait Implementations

impl Clone for ProviderRegistry

fn clone(&self) -> ProviderRegistry

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Default for ProviderRegistry

fn default() -> ProviderRegistry

Returns the “default value” for a type.