Skip to main content

in_force

didbot_serve::oauth::token

Function in_force 

Source 
pub fn in_force(
    approved: &ScopeSet,
    ceiling: &dyn ScopePolicy,
    did: &str,
    client_id: &ClientId,
) -> ScopeSet
Expand description

What a login approved at approved may do now: that set as ceiling grants it for this account and client, by the same verdict POST /oauth/par reached. Empty when the ceiling grants none of it.

Never wider than approved: a narrowing projects the request onto the ceiling, so a ceiling loosened after sign-in answers approved itself rather than anything past it.