Struct KeycloakClaimsPlugin 

pub struct KeycloakClaimsPlugin {
    pub tenant_claim: String,
    pub client_roles: Option<String>,
    pub role_prefix: Option<String>,
}

Keycloak-specific claims plugin

Handles Keycloak’s specific claim structure:

• Roles from realm_access.roles and resource_access.<client>.roles
• Optional role prefix
• Tenant claim from configurable field (default: tenant_id)
• Handles Keycloak’s audience validation via aud, azp, or resource_access

Fields

tenant_claim: String

Name of the tenant claim field (default: tenant_id)

client_roles: Option<String>

Optional: client ID to extract roles from resource_access

role_prefix: Option<String>

Optional: prefix to add to all roles

Implementations

impl KeycloakClaimsPlugin

pub fn new( tenant_claim: impl Into<String>, client_roles: Option<String>, role_prefix: Option<String>, ) -> Self

Create a new Keycloak plugin with custom configuration

Trait Implementations

impl ClaimsPlugin for KeycloakClaimsPlugin

fn name(&self) -> &'static str

Returns the name of this plugin (for debugging/logging)

fn normalize(&self, raw: &Value) -> Result<Claims, ClaimsError>

Normalize provider-specific claims into our standard format

impl Clone for KeycloakClaimsPlugin

fn clone(&self) -> KeycloakClaimsPlugin

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for KeycloakClaimsPlugin

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for KeycloakClaimsPlugin

fn default() -> Self

Returns the “default value” for a type.