Struct PathSegmentTenantResolver 

pub struct PathSegmentTenantResolver { /* private fields */ }

Extracts a tenant ID from a URL path segment by index.

The path is client-controlled, so this isolates nothing on its own — it is a routing convention that a gateway or an authorising interceptor has to back up. See this module’s security section.

Path segments are split by /, with empty segments (from leading /) removed. For example, the path /tenants/acme/tasks has segments ["tenants", "acme", "tasks"]; index 1 yields "acme".

The resolver reads the request path from the :path key in CallContext::http_headers, which the JSON-RPC, REST and WebSocket dispatchers set from the request URI. The gRPC dispatcher and the Axum adapter do not set it, so there resolution always returns None; use BearerTokenTenantResolver or HeaderTenantResolver with those.

Through 0.14.0 this resolver fell back to an ordinary path header when :path was absent. Any client could send that header, and so choose its own tenant (GHSA-hr9h-6jvf-wvg6); the fallback is gone.

Example

use a2a_protocol_server::tenant_resolver::PathSegmentTenantResolver;

// Extract segment at index 1: /tenants/{id}/...
let resolver = PathSegmentTenantResolver::new(1);

Implementations

impl PathSegmentTenantResolver

pub const fn new(segment_index: usize) -> PathSegmentTenantResolver

Creates a resolver that extracts the path segment at the given index.

Index 0 is the first non-empty segment after the leading /.

Trait Implementations

impl Clone for PathSegmentTenantResolver

fn clone(&self) -> PathSegmentTenantResolver

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for PathSegmentTenantResolver

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl TenantResolver for PathSegmentTenantResolver

fn resolve<'a>( &'a self, ctx: &'a CallContext, ) -> Pin<Box<dyn Future<Output = Option<String>> + Send + 'a>>

Extracts the tenant identifier from the given call context.