Struct PolicyInput 

pub struct PolicyInput<'a> {
    pub action: &'a str,
    pub subject: &'a Map<String, Value>,
    pub tenant: Option<&'a str>,
    pub resource: Value,
    pub env: EnvAttributes,
}

Everything a rule may inspect for one decision.

Fields

action: &'a str

Dotted action name, e.g. "orders.refund".

subject: &'a Map<String, Value>

The authenticated principal’s JWT claims.

tenant: Option<&'a str>

resource: Value

Handler-supplied resource attributes (Null for route-level checks).

env: EnvAttributes

Implementations

impl PolicyInput<'_>

pub fn subject_str(&self, key: &str) -> Option<&str>

Convenience: a string claim from the subject.

pub fn resource_i64(&self, key: &str) -> Option<i64>

Convenience: a numeric resource attribute.