Struct AuthResult 

pub struct AuthResult {
    pub identity: String,
    pub method: AuthMethod,
    pub client_cert_der: Option<Vec<u8>>,
    pub subject_dn: Option<String>,
    pub subject_alt_names: Vec<String>,
    pub extended_key_usage: Vec<String>,
}

Result of a successful authentication.

Contains the authenticated identity, the method used, and any attributes extracted from the credential (e.g., certificate subject, SANs, EKU extensions).

Fields

identity: String

The authenticated identity string.

For mTLS: the certificate subject DN or SAN. For OTP: the entity-id from HTTP Basic username. For GSSAPI: the Kerberos principal name.

method: AuthMethod

How the client authenticated.

client_cert_der: Option<Vec<u8>>

DER-encoded client certificate (mTLS only).

Available for POP linking validation in /simpleenroll and /simplereenroll handlers.

subject_dn: Option<String>

Subject DN from the client certificate (mTLS only).

subject_alt_names: Vec<String>

Subject Alternative Names from the client certificate (mTLS only).

extended_key_usage: Vec<String>

Extended Key Usage OIDs from the client certificate (mTLS only).

Used by /fullcmc to verify the signer holds id-kp-cmcRA (OID 1.3.6.1.5.5.7.3.28) per RHELBU-3536 R15.

Implementations

impl AuthResult

pub fn anonymous() -> Self

Create an unauthenticated result for endpoints that do not require auth.

pub fn has_cmc_ra_eku(&self) -> bool

Returns true if the client certificate carries the id-kp-cmcRA EKU.

OID: 1.3.6.1.5.5.7.3.28 (RFC 6402 §2.10).

Trait Implementations

impl Clone for AuthResult

fn clone(&self) -> AuthResult

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuthResult

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.