Enum IdentityDescriptor 

pub enum IdentityDescriptor {
    Oidc {
        issuer: String,
        subject: String,
        proof: String,
    },
    Spiffe {
        subject: String,
        svid_type: String,
        proof: String,
    },
}

An RFC-AITP-0002 identity descriptor with its token as proof (§5.1). Debug never prints the token.

Variants

Oidc

An OIDC ID token.

Fields

issuer: String

The issuer URI.

subject: String

The token’s sub.

proof: String

The ID token.

Spiffe

A SPIFFE JWT-SVID.

Fields

subject: String

The SPIFFE ID.

svid_type: String

Always jwt-svid: X509-SVIDs are not accepted.

proof: String

The JWT-SVID.

Implementations

impl IdentityDescriptor

pub fn oidc( issuer: impl Into<String>, subject: impl Into<String>, token: impl Into<String>, ) -> Self

An OIDC descriptor.

pub fn spiffe_jwt(subject: impl Into<String>, svid: impl Into<String>) -> Self

A SPIFFE JWT-SVID descriptor.

pub fn token(&self) -> &str

The token.

pub fn identity(&self) -> WorkloadIdentity

The identity without its proof.

pub fn validate(&self) -> Result<(), AcdpError>

Check the schema patterns: X509-SVIDs and malformed tokens are a schema_violation.

Trait Implementations

impl Clone for IdentityDescriptor

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for IdentityDescriptor

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for IdentityDescriptor

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for IdentityDescriptor

impl PartialEq for IdentityDescriptor

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for IdentityDescriptor

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for IdentityDescriptor