pub struct JwtTargetAcceptancePolicy { /* private fields */ }Expand description
One strict, non-serializable target-selection policy.
Raw URLs and the selected JSON field stay private to this policy and are
omitted from audit output. Debug redacts them. The policy grants no
authority beyond its one exact resource.
Implementations§
Source§impl JwtTargetAcceptancePolicy
impl JwtTargetAcceptancePolicy
Sourcepub fn new(
operator_policy_identity: (&str, &str),
application: Url,
resource: Url,
resource_reference: &str,
success_json_field: &str,
) -> Result<Self, JwtTargetAcceptancePolicyError>
pub fn new( operator_policy_identity: (&str, &str), application: Url, resource: Url, resource_reference: &str, success_json_field: &str, ) -> Result<Self, JwtTargetAcceptancePolicyError>
Constructs one exact-origin, application-contained GET policy.
Both URLs must use HTTP or HTTPS and must omit user information, query,
and fragment components. HTTP admission here does not grant network
authority; the owning runtime applies its existing transport policy.
Library callers must reject unsafe raw URL spellings before parsing,
because a typed Url can no longer expose spelling normalized by its
parser. The declared policy revision must change whenever the application,
resource, resource reference, or private success-marker semantics change;
reports omit the raw URL and marker and compare that revision instead.
Sourcepub const fn schema(&self) -> &'static str
pub const fn schema(&self) -> &'static str
Stable schema identifier for the selected operator policy.
Sourcepub const fn method(&self) -> JwtTargetAcceptanceMethod
pub const fn method(&self) -> JwtTargetAcceptanceMethod
Fixed bodyless request method.
Sourcepub fn operator_policy_reference(&self) -> &str
pub fn operator_policy_reference(&self) -> &str
Safe non-secret operator policy reference.
Sourcepub fn operator_policy_revision(&self) -> &str
pub fn operator_policy_revision(&self) -> &str
Safe non-secret operator policy revision.
Sourcepub const fn application(&self) -> &Url
pub const fn application(&self) -> &Url
Exact selected application URL.
The value is runtime input and is never copied into the value-free audit.
Sourcepub const fn resource(&self) -> &Url
pub const fn resource(&self) -> &Url
Exact selected GET resource URL.
The value is runtime input and is never copied into the value-free audit.
Sourcepub fn resource_reference(&self) -> &str
pub fn resource_reference(&self) -> &str
Safe non-secret resource reference used by audit output.
Sourcepub fn success_json_field(&self) -> &str
pub fn success_json_field(&self) -> &str
Private top-level JSON marker selected by the operator.
The field name is exposed only for response classification and is never copied into the audit.
Sourcepub const fn max_requests(&self) -> u8
pub const fn max_requests(&self) -> u8
Fixed request ceiling.
Sourcepub const fn max_active_requests(&self) -> u8
pub const fn max_active_requests(&self) -> u8
Fixed active-request ceiling.
Sourcepub const fn max_response_bytes(&self) -> u64
pub const fn max_response_bytes(&self) -> u64
Fixed per-response retained/interpreted byte ceiling.
Sourcepub const fn max_total_response_bytes(&self) -> u64
pub const fn max_total_response_bytes(&self) -> u64
Fixed aggregate retained/interpreted byte ceiling.