Struct Identity 

pub struct Identity {
    pub id: String,
    pub tenant: Option<String>,
    pub email: Option<String>,
    pub email_verified: bool,
    pub phone: Option<String>,
    pub phone_verified: bool,
    pub status: AccountStatus,
    pub roles: Vec<String>,
    pub perms: Vec<String>,
    pub mfa: MfaState,
    pub attributes: Map<String, Value>,
}

The canonical user record. PII fields (email, phone) are expected to be encrypted at rest by the app’s UserStore via the compliance CryptoVault; this struct is the decrypted view a handler sees.

Fields

id: String

tenant: Option<String>

Home tenant (B2B). None for a global / B2C consumer.

email: Option<String>

email_verified: bool

phone: Option<String>

phone_verified: bool

status: AccountStatus

roles: Vec<String>

perms: Vec<String>

Fine-grained resource:action permissions embedded in the access token.

mfa: MfaState

attributes: Map<String, Value>

Progressive-profiling / custom claims surfaced to policies and OIDC.

Implementations

impl Identity

pub fn primary_role(&self) -> &str

Primary role string for the JWT role claim (first role, or "user").

Trait Implementations

impl Clone for Identity

fn clone(&self) -> Identity

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Identity

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for Identity

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for Identity

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.