Method _auth

salt/master.py:3154–3187

Authenticate the client. Wraps :meth:`_auth_impl` to record one ``salt.auth.attempts`` increment per call, labelling the result from the wrapped return value.

(self, load, sign_messages=False, version=0)

            return {"enc": "clear", "load": {"ret": "bad sig algo"}}

    def _auth(self, load, sign_messages=False, version=0):
        """
        Authenticate the client.  Wraps :meth:`_auth_impl` to record one
        ``salt.auth.attempts`` increment per call, labelling the result
        from the wrapped return value.
        """
        result = "error"
        try:
            ret = self._auth_impl(load, sign_messages=sign_messages, version=version)
            # ``ret`` may be ``{"enc": "clear", "load": {"ret": ...}}`` or a
            # ``_clear_signed``-wrapped variant of the same shape.  Salt
            # encodes outcomes in the inner ``ret`` value: True / a dict =
            # success, False = key rejected, "full" = max_minions hit,
            # "denied" / "rejected" = explicit reject.
            try:
                inner = ret.get("load", {}) if isinstance(ret, dict) else {}
                if isinstance(inner, dict):
                    r = inner.get("ret")
                    if r is True or isinstance(r, dict):
                        result = "success"
                    elif r == "full":
                        result = "max_minions"
                    elif r in (False, "denied", "rejected"):
                        result = "rejected"
                    elif isinstance(r, str):
                        result = r
            except Exception:  # pylint: disable=broad-except
                pass
            return ret
        finally:
            salt.utils.metrics.counter(
                "salt.auth.attempts",
                description="Minion authentication attempts.",
            ).add(1, attributes={"result": result})

    def _auth_impl(self, load, sign_messages=False, version=0):
        """