Enum IdentityError 

#[non_exhaustive]
pub enum IdentityError {
    Malformed(String),
    MissingKid,
    UnknownKid(String),
    AlgorithmRejected {
        alg: String,
        kid: String,
    },
    Verification(String),
    TtlTooLong(u64),
    BadTimestamps {
        iat: u64,
        exp: u64,
    },
    FutureIat {
        iat: u64,
        now: u64,
    },
    Expired {
        exp: u64,
        now: u64,
    },
    EmptyField(&'static str),
    FieldTooLong {
        field: &'static str,
        max: usize,
    },
    SpoofingCharacter(&'static str),
    BadIssuer(String),
    Jwks(String),
    ScopeEscalation {
        scope: String,
    },
    ExpEscalation {
        child: u64,
        parent: u64,
    },
    IatEscalation {
        child: u64,
        parent: u64,
    },
    NbfEscalation {
        child: u64,
        parent: u64,
    },
    ChainTooDeep(usize),
    Revoked(String),
    InstanceRevoked {
        instance_uid: String,
        cutoff: u64,
    },
    RevocationUnavailable(String),
    SubjectNotHuman,
    SubjectPattern(String),
}

Identity validation failures.

Variants (Non-exhaustive)

Non-exhaustive enums could have additional variants added in future. Therefore, when matching against variants of non-exhaustive enums, an extra wildcard arm must be added to account for any future variants.

Malformed(String)

Token structurally malformed.

MissingKid

Header lacks a kid.

UnknownKid(String)

No key registered for this kid.

AlgorithmRejected

Token alg is not accepted, or does not match the key type for its kid (algorithm-confusion defense).

Fields

alg: String

Stated algorithm.

kid: String

Key id.

Verification(String)

Signature invalid / expired / nbf future / wrong audience — collapsed by jsonwebtoken; the detail string preserves the cause.

TtlTooLong(u64)

exp - iat exceeds the 15-minute NHI cap.

BadTimestamps

exp ≤ iat or other timestamp nonsense.

Fields

iat: u64

Issued-at.

exp: u64

Expiry.

FutureIat

iat is unreasonably far in the future.

Fields

iat: u64

Issued-at claim.

now: u64

Validator wall clock.

Expired

Token expired — with enough context to tell a stale token from a skewed validator clock. Round-106/107 drills: a +6h host rejects every honest client with a bare “ExpiredSignature”, sending the operator hunting client TTLs instead of their own NTP. An “expiry” further in the past than the maximum issuable TTL can only mean the validating host’s clock is ahead.

Fields

exp: u64

Expiry claim (signature-verified before extraction).

now: u64

Validator wall clock.

EmptyField(&'static str)

Required identity field empty.

FieldTooLong

Identity field longer than its documented cap.

Fields

field: &'static str

Field name.

max: usize

Documented cap in Unicode code points.

SpoofingCharacter(&'static str)

Field carries a bidi override or zero-width character that would spoof how the identity renders in a log or audit view.

BadIssuer(String)

Issuer not in the allowlist.

Jwks(String)

JWKS document was malformed or contained no supported signing keys.

ScopeEscalation

Child scopes exceed parent scopes.

Fields

scope: String

The offending scope.

ExpEscalation

Child outlives parent.

Fields

child: u64

Child expiry.

parent: u64

Parent expiry.

IatEscalation

Child claims to be issued before its parent (the delegator). A backdated child forges audit-trail causality: consumers that treat claims.iat as “when this identity became authorized” see the child asserting authority before the parent that granted it existed.

Fields

child: u64

Child issued-at.

parent: u64

Parent issued-at.

NbfEscalation

Child’s effective start (nbf when set, else iat) is earlier than the parent’s effective start (nbf when set, else iat) — same forgery class as IatEscalation. The carried child and parent values are the compared EFFECTIVE starts, not the raw nbf fields (which may be absent). See IdentityValidator::validate for the full case matrix.

Fields

child: u64

Child effective start: child.nbf when set, else child.iat. The fallback closes an input case where the child omits nbf but its iat predates the parent’s explicit nbf — a temporal-inversion forgery an earlier version of this guard silently accepted.

parent: u64

Parent effective start: parent.nbf when set, else parent.iat.

ChainTooDeep(usize)

Delegation chain deeper than permitted.

Revoked(String)

Token’s JTI (or the JTI of a token in its delegation chain) appears in the revocation store.

InstanceRevoked

Tokens issued by this instance at or before the cutoff were revoked.

Fields

instance_uid: String

Revoked instance identifier.

cutoff: u64

Inclusive issued-at cutoff.

RevocationUnavailable(String)

The revocation store could not be read. The token is refused because it might be revoked; this is an availability fault, not a credential fault.

SubjectNotHuman

The token’s sub does not match the configured human-principal pattern, so the identity is not attributable to a human.

SubjectPattern(String)

The human-principal pattern itself is invalid.

Trait Implementations

impl Debug for IdentityError

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for IdentityError

fn fmt(&self, __formatter: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Error for IdentityError

fn source(&self) -> Option<&(dyn Error + 'static)>

Returns the lower-level source of this error, if any.

fn description(&self) -> &str

👎Deprecated since 1.42.0:

use the Display impl or to_string()

fn cause(&self) -> Option<&dyn Error>

👎Deprecated since 1.33.0:

replaced by Error::source, which can support downcasting

fn provide<'a>(&'a self, request: &mut Request<'a>)

🔬This is a nightly-only experimental API. (error_generic_member_access)

Provides type-based access to context intended for error reports.

impl From<IdentityError> for ExchangeError

fn from(source: IdentityError) -> Self

Converts to this type from the input type.

impl PartialEq for IdentityError

fn eq(&self, other: &IdentityError) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Eq for IdentityError

impl StructuralPartialEq for IdentityError