Struct Writer 

pub struct Writer {
    did: String,
    token: Option<(ClientId, ScopeSet)>,
}

Who a repo write speaks for, as require_agent_token_or_dpop resolved it.

What a write needs past the account is reached through Writer::authorize alone, so a route cannot name the client to the write path without first checking the token’s scope.

Fields

did: String

token: Option<(ClientId, ScopeSet)>

The application whose OAuth token was presented, and the scope that token was granted. None for the account’s own agent token.

Implementations

impl Writer

pub fn did(&self) -> &str

The account the credential authenticates as.

pub fn authorize<'a>( &'a self, writes: &[(&str, Action)], ) -> Result<Authorized<'a>, ScopeMissing>

Checks every (collection, action) a request would write against the token’s scope. The account’s own agent token is not scoped: what it may write is policy’s question alone.

Errors

The first write the token’s scope does not cover.

pub fn authorize_blob( &self, mime_type: &str, ) -> Result<Authorized<'_>, ScopeMissing>

Checks one upload’s declared type against the token’s scope. How large a blob may be is policy’s and the server’s, not the grant’s.

Errors

The upload, when the token’s scope does not cover it.

pub fn authorize_rpc( &self, lxm: Option<&str>, aud: &str, ) -> Result<Authorized<'_>, ScopeMissing>

Checks acting at another service against the token’s scope: calling lxm at aud, or taking a service-auth token for it. The account’s own agent token acts anywhere.

Errors

The call, when the token’s scope does not permit it; see ScopeSet::permits_rpc.

Trait Implementations

impl Clone for Writer

fn clone(&self) -> Writer

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Writer

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for Writer

fn eq(&self, other: &Writer) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Eq for Writer

impl StructuralPartialEq for Writer