Struct AuthValidator 

pub struct AuthValidator { /* private fields */ }

Authentication validator for validating entries and resolving auth information

Implementations

impl AuthValidator

pub fn new() -> Self

Create a new authentication validator

pub async fn validate_entry( &mut self, entry: &Entry, auth_settings: &AuthSettings, instance: Option<&Instance>, ) -> Result<bool>

Validate an entry’s authentication

This method answers: “Is this entry valid?” which includes:

1. Is the signature valid (or is unsigned allowed)?
2. Does the signing key have permission for what this entry does?

For entries with name hints that match multiple keys, this method tries signature verification against each matching key until one succeeds.

Returns

• Ok(true) - Entry is valid (signature verified with sufficient permissions, or unsigned allowed)
• Ok(false) - Entry is invalid (malformed, bad signature, insufficient permissions, etc.)
• Err(...) - Actual error (I/O, database failures)

Arguments

• entry - The entry to validate
• auth_settings - Authentication settings for key lookup
• instance - Instance for loading delegated trees (optional for direct keys)

pub async fn resolve_sig_key( &mut self, sig_key: &SigKey, auth_settings: &AuthSettings, instance: Option<&Instance>, ) -> Result<Vec<ResolvedAuth>>

Resolve authentication identifier to concrete authentication information

Returns all matching ResolvedAuth entries. For name hints that match multiple keys, all matches are returned so the caller can try signature verification against each.

Arguments

• sig_key - The signature key identifier to resolve
• auth_settings - Authentication settings containing auth configuration
• instance - Instance for loading delegated trees (required for Delegation sig_key)

pub fn check_permissions( &self, resolved: &ResolvedAuth, operation: &Operation, ) -> Result<bool>

Check if a resolved authentication has sufficient permissions for an operation

pub fn clear_cache(&mut self)

Clear the authentication cache

Trait Implementations

impl Default for AuthValidator

fn default() -> Self

Returns the “default value” for a type.