Struct Claims 

pub struct Claims {
    pub sub: String,
    pub iat: u64,
    pub exp: u64,
    pub scope: Vec<Scope>,
    pub team_id: Option<String>,
    pub org_id: Option<String>,
}

JWT claims payload.

Fields

sub: String

Subject: the API key ID that this token was issued for.

iat: u64

Issued-at timestamp (Unix epoch seconds).

exp: u64

Expiry timestamp (Unix epoch seconds).

scope: Vec<Scope>

Scopes granted to this token.

team_id: Option<String>

AAASM-3139 — the team this token is scoped to. When present, a non-admin caller is confined to its own team for per-tenant data (e.g. /costs, /agents/{id}/budget). None on legacy tokens issued before tenant claims existed, which therefore carry no team scope (and remain admin-gated for cross-tenant data).

org_id: Option<String>

AAASM-3139 — the org this token is scoped to. See Claims::team_id.

Trait Implementations

impl Clone for Claims

fn clone(&self) -> Claims

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Claims

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for Claims

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for Claims

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.