Struct DenyAll 

pub struct DenyAll;

The default empty configuration that denies all access.

Trait Implementations

impl ServerSecurityConfig for DenyAll

const PARSES_TOKENS: bool = false

True if the type will at any time need to process tokens at /authz-info.

const HAS_EDHOC: bool = false

True if the type will at any time need to process requests to /.well-known/edhoc.

type GeneralClaims = Infallible

The way scopes issued with this system as audience by this AS are expressed here.

fn decrypt_symmetric_token<'buf>( &self, headers: &HeaderMap<'_>, aad: &[u8], ciphertext_buffer: &'buf mut [u8], ) -> Result<(Self::GeneralClaims, CwtClaimsSet<'buf>), CredentialError>

Unprotects a symmetriclly encrypted token and processes the contained CWT Claims Set into a Self::GeneralClaims and returns the full claims.

fn verify_asymmetric_token<'b>( &self, headers: &HeaderMap<'_>, signed_data: &[u8], signature: &[u8], signed_payload: &'b [u8], ) -> Result<(Self::GeneralClaims, CwtClaimsSet<'b>), CredentialError>

Verify the signature on a symmetrically encrypted token

fn own_edhoc_credential(&self) -> Option<(Credential, BytesP256ElemLen)>

The credential (by value or by reference) and key that the server reports (and uses) in incoming EDHOC exchanges (i.e., in the role of the responder).

fn expand_id_cred_x( &self, id_cred_x: IdCred, ) -> Option<(Credential, Self::GeneralClaims)>

Expands an EDHOC ID_CRED_x into a parsed CRED_x along with the associated authorizations.

fn nosec_authorization(&self) -> Option<Self::GeneralClaims>

Generates the scope representing unauthenticated access.

fn render_not_allowed<M: MutableWritableMessage>( &self, message: &mut M, ) -> Result<(), NotAllowedRenderingFailed>

Render the “not allowed” message in this scenario.