Struct ActClaims 

pub struct ActClaims {
    pub jti: String,
    pub sub: String,
    pub iss: String,
    pub aud: Vec<String>,
    pub iat: i64,
    pub nbf: i64,
    pub exp: i64,
    pub tenant_id: String,
    pub scope: Vec<Scope>,
    pub cnf: Option<Confirmation>,
    pub delegation: Option<Delegation>,
    pub ext: BTreeMap<String, Value>,
}

The claim set carried inside an ACT envelope.

Field names are the wire keys. Unknown top-level keys are ignored on decode so that a newer issuer can add typed claims without breaking existing verifiers; issuer-specific claims belong in ActClaims::ext instead.

Fields

jti: String

Token identifier, unique per issuance. Text, not bytes - a UUID here is carried in its canonical hyphenated form.

sub: String

Subject: the OAS DID of the agent this token was issued to.

iss: String

Issuer: the broker instance that minted this token.

aud: Vec<String>

Audiences this token is valid for.

Decodes from either a single string or an array of strings, since a single-audience token is the common case and writing it as a bare string is the conventional CBOR/JWT shorthand.

iat: i64

Issued-at time, in seconds since the Unix epoch.

nbf: i64

Not-before time, in seconds since the Unix epoch.

exp: i64

Expiry time, in seconds since the Unix epoch.

tenant_id: String

Tenant this token is scoped to.

scope: Vec<Scope>

Granted capability scopes, as a flat array.

cnf: Option<Confirmation>

Proof-of-possession binding. See Confirmation.

delegation: Option<Delegation>

Onward delegation constraints. See Delegation.

ext: BTreeMap<String, Value>

Issuer-defined claims, carried inside the signature and passed through unaltered.

This is where rate limits, budgets, device and network bindings, and audit trace belong. A verifier that does not understand a key here must preserve it rather than drop it, so that a downstream component which does understand it still receives an intact, signed value.

Implementations

impl ActClaims

pub fn validate_structure(&self) -> ActResult<()>

Checks the claim set is structurally sound, independent of signature or clock.

Called during verification before any policy check. Kept public so an issuer can reject a malformed claim set at mint time rather than discovering it at the verifier.

Errors

Returns ActError::EmptyClaim for a required claim that is blank, and ActError::EmptyValidityWindow if nbf is not before exp.

pub fn authorizes(&self, requested: &Scope) -> bool

Whether the granted scopes authorize requested.

Wildcards in the grant expand; wildcards in the request do not. See Scope::covers.

pub fn has_audience(&self, audience: &str) -> bool

Whether this token lists audience among its audiences.

Trait Implementations

impl Clone for ActClaims

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ActClaims

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for ActClaims

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for ActClaims

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for ActClaims

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for ActClaims