Struct SessionClaims 

pub struct SessionClaims {

    pub iss: String,
    pub sub: String,
    pub aud: String,
    pub iat: u64,
    pub nbf: u64,
    pub exp: u64,
    pub jti: String,
    pub scope: String,
    pub metering_key: String,
    pub deployment_id: Option<String>,
    pub target_kind: Option<TargetKind>,
    pub target_id: Option<String>,
    pub program_id: Option<String>,
    pub program_release_hash: Option<String>,
    pub origin: Option<String>,
    pub client_ip: Option<String>,
    pub limits: Option<Limits>,
    pub plan: Option<String>,
    pub key_class: KeyClass,
}

Session token claims

Fields

iss: String

Issuer - who issued this token

sub: String

Subject - who this token is for

aud: String

Audience - intended recipient (e.g., deployment ID)

iat: u64

Issued at (Unix timestamp)

nbf: u64

Not valid before (Unix timestamp)

exp: u64

Expiration time (Unix timestamp)

jti: String

JWT ID - unique identifier for this token

scope: String

Scope - permissions granted

metering_key: String

Metering key - for usage attribution

deployment_id: Option<String>

Deployment ID (optional)

target_kind: Option<TargetKind>

Typed resource target (optional for legacy deployment tokens)

target_id: Option<String>

Public target identifier (optional for legacy deployment tokens)

program_id: Option<String>

Program allowed by this token

program_release_hash: Option<String>

Exact immutable program release allowed by this token

origin: Option<String>

Origin binding (optional, defense-in-depth)

client_ip: Option<String>

Client IP binding (optional, for high-security scenarios)

limits: Option<Limits>

Resource limits

plan: Option<String>

Plan identifier (optional)

key_class: KeyClass

Key class (secret vs publishable)

Implementations

impl SessionClaims

pub fn builder( iss: impl Into<String>, sub: impl Into<String>, aud: impl Into<String>, ) -> SessionClaimsBuilder

Create a new session claims builder

pub fn program_read_builder( iss: impl Into<String>, sub: impl Into<String>, target_id: impl Into<String>, program_id: impl Into<String>, program_release_hash: impl Into<String>, ) -> SessionClaimsBuilder

Create claims for one exact program-read binding, program, and release.

pub fn solana_gateway_builder( iss: impl Into<String>, sub: impl Into<String>, target_id: impl Into<String>, ) -> SessionClaimsBuilder

Create claims for one regional Solana gateway binding.

pub fn is_expired(&self, now: u64) -> bool

Check if the token is expired

pub fn is_valid(&self, now: u64) -> bool

Check if the token is valid (not before issued)

Trait Implementations

impl Clone for SessionClaims

fn clone(&self) -> SessionClaims

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SessionClaims

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for SessionClaims

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for SessionClaims

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.