Struct ProgramReadAuthorization 

pub struct ProgramReadAuthorization {

    pub subject: String,
    pub issuer: String,
    pub key_class: KeyClass,
    pub metering_key: String,
    pub target_id: String,
    pub program_id: String,
    pub program_release_hash: String,
    pub limits: Limits,
    pub plan: Option<String>,
    pub expires_at: u64,
    pub jti: String,
    pub actor_key: Option<String>,
    pub account_key: Option<String>,
    pub consumer_key: Option<String>,
    pub policy_version: Option<u32>,
    pub account_limits: Limits,
}

Authorization for one exact program read, derived from verified claims.

Fields

subject: String

Subject used for user attribution.

issuer: String

Issuer of the verified token.

key_class: KeyClass

API key class used for policy and attribution.

metering_key: String

Opaque API-key or anonymous metering identity.

target_id: String

Authorized public program-read binding ID.

program_id: String

Authorized Solana program ID.

program_release_hash: String

Authorized immutable program release hash.

limits: Limits

Resource limits carried by the token.

plan: Option<String>

Plan or access tier carried by the token.

expires_at: u64

Token expiration time.

jti: String

JWT ID for audit correlation.

actor_key: Option<String>

Raw signed actor identity; use ProgramReadAuthorization::actor_key to resolve.

account_key: Option<String>

Raw signed account identity; use ProgramReadAuthorization::account_key to resolve.

consumer_key: Option<String>

Raw signed consumer identity; use ProgramReadAuthorization::consumer_key to resolve.

policy_version: Option<u32>

Monotonic account policy version, absent on legacy tokens.

account_limits: Limits

Aggregate account limits, defaulted when the token carries none.

Implementations

impl ProgramReadAuthorization

pub fn try_from_context( context: &AuthContext, expected_target_id: &str, expected_program_id: &str, expected_program_release_hash: &str, ) -> Result<Self, ProgramReadAuthorizationError>

Convert a verified context into authorization for the requested resource.

pub fn actor_key(&self) -> &str

Resolved actor identity: actor_key claim, falling back to sub.

pub fn consumer_key(&self) -> &str

Resolved consumer identity: consumer_key claim, falling back to sub.

pub fn account_key(&self) -> &str

Resolved account identity: account_key claim, falling back to metering_key.

pub fn is_legacy_policy(&self) -> bool

True when the token predates the v2 policy contract.

Trait Implementations

impl Clone for ProgramReadAuthorization

fn clone(&self) -> ProgramReadAuthorization

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ProgramReadAuthorization

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'a> TryFrom<(&'a AuthContext, &'a str, &'a str, &'a str)> for ProgramReadAuthorization

type Error = ProgramReadAuthorizationError

The type returned in the event of a conversion error.

fn try_from( (context, target_id, program_id, program_release_hash): (&'a AuthContext, &'a str, &'a str, &'a str), ) -> Result<Self, Self::Error>

Performs the conversion.