Struct DenyAll

pub struct DenyAll;

The default empty configuration that denies all access.

Trait Implementations

impl ServerSecurityConfig for DenyAll

const PARSES_TOKENS: bool = false

True if the type will at any time need to process tokens at /authz-info

type Scope = Infallible

The way scopes issued with this system as audience by this AS are expressed here.

fn decrypt_symmetric_token<'buf>( &self, headers: &HeaderMap<'_>, aad: &[u8], ciphertext_buffer: &'buf mut [u8], _: PrivateMethod, ) -> Result<(Self::Scope, CwtClaimsSet<'buf>), CredentialError>

Unprotects a symmetriclly encrypted token and processes the contained [CWT Claims Set][crate::ace::CwtClaimsSet] into a Self::Scope and returns the claims.

fn verify_asymmetric_token<'b>( &self, headers: &HeaderMap<'_>, signed_data: &[u8], signature: &[u8], signed_payload: &'b [u8], _: PrivateMethod, ) -> Result<(Self::Scope, CwtClaimsSet<'b>), CredentialError>

Verify the signature on a symmetrically encrypted token

fn own_edhoc_credential(&self) -> Option<(Credential, BytesP256ElemLen)>

fn expand_id_cred_x( &self, id_cred_x: IdCred, ) -> Option<(Credential, Self::Scope)>

Expands an EDHOC ID_CRED_x into a parsed CRED_x along with the associated authorizations.

fn nosec_authorization(&self) -> Option<Self::Scope>

Generates the scope representing unauthenticated access.

fn render_not_allowed<M: MutableWritableMessage>( &self, message: &mut M, ) -> Result<(), NotAllowedRenderingFailed>

Render the “not allowed” message in this scenario.