Enum CimdError 

pub enum CimdError {
    Ssrf(SsrfError),
    DnsResolutionFailed(String, String),
    DnsBlocked(String),
    Fetch(String),
    PeerMismatch {
        expected: SocketAddr,
        actual: SocketAddr,
    },
    InvalidDocument(String),
    ClientIdMismatch {
        document_client_id: String,
        requested_url: String,
    },
}

Variants

Ssrf(SsrfError)

DnsResolutionFailed(String, String)

A genuine DNS lookup failure (NXDOMAIN, resolver timeout, network unreachable) — an operational problem, NOT a security event. Kept distinct from Self::DnsBlocked so logs/callers can tell a mistyped hostname apart from an actual SSRF attempt.

DnsBlocked(String)

DNS resolution succeeded but at least one resolved address was private/loopback/link-local/etc — the whole result is rejected rather than falling back to a public address in the same set, since a hostname resolving to a mix of public and private addresses is itself a signal worth treating as untrusted.

Fetch(String)

PeerMismatch

The actual TCP peer the response came from did not match the address this fetch was pinned to. This is the post-connect TOCTOU/proxy-interception backstop — see fetch_document_at.

Fields

expected: SocketAddr

actual: SocketAddr

InvalidDocument(String)

ClientIdMismatch

Fields

document_client_id: String

requested_url: String

Implementations

impl CimdError

pub fn kind(&self) -> &'static str

Stable kind string for structured logging. Deliberately NOT surfaced verbatim (via Display/to_string()) to the anonymous /authorize caller — see authorize::resolve_client_redirect_uris, which logs the full error server-side via this kind() plus Display but returns only a generic message in the HTTP response. A detailed message returned to an unauthenticated caller lets them distinguish “resolves internally” from “doesn’t exist” from “resolves publicly but unreachable,” which is a network-topology mapping oracle.

Trait Implementations

impl Clone for CimdError

fn clone(&self) -> CimdError

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CimdError

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for CimdError

fn fmt(&self, __formatter: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Error for CimdError

fn source(&self) -> Option<&(dyn Error + 'static)>

Returns the lower-level source of this error, if any.

fn description(&self) -> &str

👎Deprecated since 1.42.0:

use the Display impl or to_string()

fn cause(&self) -> Option<&dyn Error>

👎Deprecated since 1.33.0:

replaced by Error::source, which can support downcasting

fn provide<'a>(&'a self, request: &mut Request<'a>)

🔬This is a nightly-only experimental API. (error_generic_member_access)

Provides type-based access to context intended for error reports.

impl From<SsrfError> for CimdError

fn from(source: SsrfError) -> Self

Converts to this type from the input type.