Struct WolfRbacPlugin 

pub struct WolfRbacPlugin {
    server: String,
    appid: String,
    header_prefix: String,
    ssl_verify: bool,
    timeout: Duration,
    rejected_code: u16,
    client: Arc<OutboundClient>,
}

Checks a wolf RBAC token against a wolf-server access_check endpoint.

Fields

server: String

wolf-server base URL (e.g. http://127.0.0.1:12180).

appid: String

Expected application id; also used as a fallback when a token omits it.

header_prefix: String

Prefix prepended to the UserId/Username/Nickname response headers.

ssl_verify: bool

Whether TLS certificates are verified on the callout.

timeout: Duration

Whole-call deadline for the wolf-server callout.

rejected_code: u16

Denial status code (401).

client: Arc<OutboundClient>

Implementations

impl WolfRbacPlugin

pub fn from_config( config: &HashMap<String, Value>, resources: &Arc<PluginResources>, ) -> Result<Self, String>

Builds the plugin from node config.

Accepted keys:

• server (string, default "http://127.0.0.1:12180"): wolf-server base URL that /wolf/rbac/access_check is called on.
• appid (string, default "unset"): application id used as the appID request argument when a token carries none.
• header_prefix (string, default "X-"): prefix for the identity headers injected on an allowed request.
• ssl_verify (bool, default false): verify wolf-server’s TLS cert.
• timeout_ms (u64, default 10000): callout deadline.

type: wolf-rbac
config:
  server: http://wolf-server:12180
  appid: restful
  header_prefix: X-
  ssl_verify: false

fn reject( &self, ctx: Context, message: &str, ) -> Result<PluginOutput, PluginExecutionError>

Builds a denial and exits on the node’s denied port.

fn callout_error(&self, ctx: Context, message: String) -> PluginExecutionError

Builds a genuine infrastructure-failure Err (wolf-server unreachable, timed out, or answering access_check with a status that is not an authorization verdict). Unlike WolfRbacPlugin::reject, this exits through the error port because the node never obtained a verdict.

Trait Implementations

impl Plugin for WolfRbacPlugin

fn plugin_type(&self) -> &str

Unique identifier for the plugin type (e.g., “proxy-rewrite”, “upstream”). This is also the key its PortSpec is registered under in port_spec.

fn execute<'life0, 'async_trait>( &'life0 self, ctx: Context, ) -> Pin<Box<dyn Future<Output = Result<PluginOutput, PluginExecutionError>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait,

Executes the plugin logic against the request/response context.

fn reads_response_body(&self) -> bool

Whether this configured instance reads context.response.body.

fn cache_target(&self) -> Option<CacheTarget>

The cache backend this node writes to, if it is a proxy-cache half.