Enum AuthError 

pub enum AuthError {
    UnknownUser,
    BadPassword,
    BadProof,
    MalformedMessage,
    UnsupportedMechanism,
    AuthorizationIdMismatch,
    InvalidToken,
    IntrospectionTransport(String),
    InsufficientScope {
        required_scope: Vec<String>,
    },
}

Variants

UnknownUser

BadPassword

BadProof

MalformedMessage

UnsupportedMechanism

AuthorizationIdMismatch

SCRAM client-first named a GS2 authorization id other than the authenticating user, which Kafka’s ScramSaslServer refuses.

InvalidToken

OAUTHBEARER token failed validation. The token was expired, carried bad claims, was a signed token that the unsecured validator rejected, had no principal, and so on. This maps to the RFC 7628 invalid_token server error status.

IntrospectionTransport(String)

OAUTHBEARER introspection HTTP round-trip failed at the transport layer.

This is distinct from InvalidToken, so the SASL handler can surface “IdP unreachable” separately from “client supplied a bad token”. It maps to the RFC 7628 invalid_token server error status.

InsufficientScope

OAUTHBEARER token passed every other check but lacked an item of the scope the validator requires. This maps to the RFC 7628 insufficient_scope server error status, and required_scope is the whole configured list, which Kafka’s challenge carries in its scope field. oauth_error_json renders that challenge.

Fields

required_scope: Vec<String>

Trait Implementations

impl Clone for AuthError

fn clone(&self) -> AuthError

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuthError

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for AuthError

fn fmt(&self, __formatter: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for AuthError

impl Error for AuthError

fn source(&self) -> Option<&(dyn Error + 'static)>

Returns the lower-level source of this error, if any.

fn description(&self) -> &str

👎Deprecated since 1.42.0:

use the Display impl or to_string()

fn cause(&self) -> Option<&dyn Error>

👎Deprecated since 1.33.0:

replaced by Error::source, which can support downcasting

fn provide<'a>(&'a self, request: &mut Request<'a>)

🔬This is a nightly-only experimental API. (error_generic_member_access)

Provides type-based access to context intended for error reports.

impl PartialEq for AuthError

fn eq(&self, other: &AuthError) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for AuthError