Enum Credential 

#[non_exhaustive]
pub enum Credential {
    None,
    Bearer(String),
    SshSignature {
        username: String,
        nonce: Vec<u8>,
        signature: Vec<u8>,
    },
    Peercred {
        uid: u32,
    },
}

A credential presented for verification (the input to the initialize handshake). Secret material is redacted in Debug — never log it raw.

Scoped to the accepted RFC provider set (bearer for native/OIDC, SSH signature, peer uid). Not-yet-accepted credential kinds (e.g. a local username/password) are added by their own scoped change, so this seam never silently carries an unaccepted credential shape.

SECURITY follow-up: the secret-bearing arms are redacted in Debug and never Eq-compared here, but the plaintext is not yet zeroized on drop. In-memory secret scrubbing is currently absent tree-wide (even the encrypted config::secrets store keeps plaintext un-scrubbed), so a Zeroizing/ SecretString convention is a separate, repo-wide hardening tracked under the auth-provider work, not bolted onto this one type.

Variants (Non-exhaustive)

Non-exhaustive enums could have additional variants added in future. Therefore, when matching against variants of non-exhaustive enums, an extra wildcard arm must be added to account for any future variants.

None

No credential was presented.

Bearer(String)

A bearer token (native pairing token, or an OIDC access/ID token).

SshSignature

An SSH challenge signature over a server-issued nonce.

Fields

username: String

nonce: Vec<u8>

signature: Vec<u8>

Peercred

A local transport peer credential (Unix-socket uid).

Fields

uid: u32

Trait Implementations

impl Clone for Credential

fn clone(&self) -> Credential

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Credential

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.