Struct PlatformSecurityContext 

pub struct PlatformSecurityContext { /* private fields */ }

Identity for non-tenant, platform-scoped operations.

Never carries a tenant subject and is never passed to the tenant PolicyEnforcer. This is a separate type from the tenant SecurityContext by design (separation of mechanisms): “this call has no tenant” is unrepresentable-as-a-tenant rather than encoded as a nil tenant id. The wrapper is stable across authentication phases; only its PlatformIdentity changes.

Implementations

impl PlatformSecurityContext

pub fn new(identity: PlatformIdentity) -> Self

Wrap a validated PlatformIdentity.

pub fn outbound_marker() -> Self

Construct a credential-free outbound plane marker.

This is not a validated identity. It exists so gear-layer code (e.g. a PolicyEnforcer) can call a platform-plane contract method whose signature takes a PlatformSecurityContext argument for compile-time plane selection, without possessing — or being able to forge — a real one. The marker carries no secret and is discarded by the generated client: the actual platform credential is attached below the contract layer from the process InternalTokenProvider, and the receiver re-derives the real identity by validating that wire token (cpt-cf-adr-two-plane-auth).

It MUST never be consulted for an authorization decision — its PlatformIdentity is PlatformIdentity::OutboundMarker, a variant no validation ever produces, so a consumer that mistakenly reads it derives neither a caller name nor a peer that could be mistaken for one.

pub fn is_outbound_marker(&self) -> bool

Whether this is the credential-free outbound marker, rather than a validated caller.

pub fn identity(&self) -> &PlatformIdentity

The validated platform identity backing this context.

pub fn into_identity(self) -> PlatformIdentity

Consume the context, returning the owned PlatformIdentity.

Trait Implementations

impl Clone for PlatformSecurityContext

fn clone(&self) -> PlatformSecurityContext

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for PlatformSecurityContext

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for PlatformSecurityContext

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for PlatformSecurityContext

impl PartialEq for PlatformSecurityContext

fn eq(&self, other: &PlatformSecurityContext) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for PlatformSecurityContext

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for PlatformSecurityContext