Struct OidcMachineIdentity 

pub struct OidcMachineIdentity {
    pub platform: String,
    pub subject: String,
    pub token_exp: i64,
    pub issuer: String,
    pub audience: String,
    pub jti: Option<String>,
    pub normalized_claims: Map<String, Value>,
}

Machine identity created from an OIDC token.

Contains the binding proof (issuer, subject, audience, expiration) so verifiers can reconstruct the identity later without needing the ephemeral key.

Fields

platform: String

Platform (github, gitlab, circleci)

subject: String

Subject claim (unique workload identifier)

token_exp: i64

Token expiration

issuer: String

Issuer

audience: String

Audience

jti: Option<String>

JTI for replay detection

normalized_claims: Map<String, Value>

Platform-normalized claims

Trait Implementations

impl Clone for OidcMachineIdentity

fn clone(&self) -> OidcMachineIdentity

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for OidcMachineIdentity

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl From<&OidcMachineIdentity> for OidcBinding

fn from(mi: &OidcMachineIdentity) -> Self

The one conversion from a validated machine identity to the signature-covered wire binding — every signing path uses this, so the two shapes can never drift.