Struct MultiAuthPlugin 

pub struct MultiAuthPlugin {
    sub_plugins: Vec<Box<dyn Plugin>>,
}

Authenticates a request by trying a list of auth sub-plugins in order and accepting the first that succeeds.

Each sub-plugin is a fully-fledged Plugin instance; on a clean success (no named exit port) it has already mutated the context (e.g. attached a consumer identity), so the winning sub-plugin’s output is returned verbatim. Anything else a sub-plugin returns — a raw Err, or an Ok on an alternate outcome port such as a credential-auth plugin’s denied — is treated as a failed attempt, not a match: multi-auth has no way to fan a single request out to more than one downstream route, so only a plain success can end the chain early. Sub-plugins run in the listed order; a later sub-plugin sees the context as left by prior failed attempts, except that the response is reset between attempts so a losing plugin’s rejection body never leaks onto a subsequent success. Auth plugins generally mutate the context only on success (leaving request/message untouched on failure), so ordering is safe.

Only auth-type plugins are meaningful here, but the set is not hard-restricted — any registered plugin type may be listed, and non-auth plugins simply run as ordinary nodes whose success ends the chain.

Fields

sub_plugins: Vec<Box<dyn Plugin>>

Sub-plugins tried in order; the first Ok wins.

Implementations

impl MultiAuthPlugin

pub fn from_config( config: &HashMap<String, Value>, resources: &Arc<PluginResources>, ) -> Result<Self, String>

Builds the plugin from node config.

Accepted keys:

• auth_plugins (array, required): each element is a single-key map {plugin-type: {that plugin's config}}. Every entry is instantiated through create_plugin at load time, so a bad sub-config (or an unknown plugin type) fails fast here rather than at request time. APISIX conventionally requires at least two entries; featherbit only requires the array to be non-empty.

type: multi-auth
config:
  auth_plugins:
    - key-auth:
        use_consumers: true
    - basic-auth:
        use_consumers: true

fn reject(ctx: Context) -> Result<PluginOutput, PluginExecutionError>

Builds the 401 rejection returned when every sub-plugin failed, and exits on the denied port.

Trait Implementations

impl Plugin for MultiAuthPlugin

fn plugin_type(&self) -> &str

Unique identifier for the plugin type (e.g., “proxy-rewrite”, “upstream”). This is also the key its PortSpec is registered under in port_spec.

fn execute<'life0, 'async_trait>( &'life0 self, ctx: Context, ) -> Pin<Box<dyn Future<Output = Result<PluginOutput, PluginExecutionError>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait,

Executes the plugin logic against the request/response context.

fn reads_response_body(&self) -> bool

Whether this configured instance reads context.response.body.

fn cache_target(&self) -> Option<CacheTarget>

The cache backend this node writes to, if it is a proxy-cache half.