Struct CallerIdentity 

pub struct CallerIdentity { /* private fields */ }

Authenticated caller metadata supplied by an adapter boundary.

Implementations

impl CallerIdentity

pub fn new( subject: impl Into<String>, namespaces: impl IntoIterator<Item = String>, ) -> Self

Build a caller identity whose namespace grants came from the development x-aion-namespaces header.

pub fn from_token_claims( subject: impl Into<String>, namespaces: impl IntoIterator<Item = String>, ) -> Self

Build a caller identity whose namespace grants came from a validated token’s namespace claim (the real JWT path), so denial messages direct the operator to the token grant instead of the development header.

pub fn with_deploy(self, deploy: bool) -> Self

Attach the deployment-wide deploy grant decision to this identity.

The grant is engine-global, never namespace-scoped: loading a package re-points routing for a workflow type that is startable from every namespace, so a namespace-valued grant would promise an isolation the engine does not provide.

pub const fn deploy_granted(&self) -> bool

Whether the caller holds the deployment-wide deploy grant.

pub fn denied(subject: impl Into<String>, reason: impl Into<String>) -> Self

Build a caller identity that must be denied with a transport-specific reason.

pub fn subject(&self) -> &str

Caller subject as authenticated by the transport.

pub fn namespaces(&self) -> Vec<String>

Namespaces this caller is authorized for, in sorted order.

Backed by a BTreeSet, so the returned vector is already lexicographically ordered with no duplicates.

Trait Implementations

impl Clone for CallerIdentity

fn clone(&self) -> CallerIdentity

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CallerIdentity

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for CallerIdentity

impl PartialEq for CallerIdentity

fn eq(&self, other: &CallerIdentity) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for CallerIdentity