Struct CallerIdentity 

pub struct CallerIdentity {
    pub subject: String,
    pub auth_method: AuthMethod,
    pub verified: bool,
    pub tenant: Option<String>,
    pub agent_id: Option<String>,
}

The identity of the caller as extracted from the HTTP request. This is protocol-agnostic – the same type is used regardless of whether the request came through a reverse proxy, framework middleware, or sidecar.

Fields

subject: String

Stable identifier for the caller (e.g., user ID, service account, agent ID). Extracted from the auth credential.

auth_method: AuthMethod

How the caller authenticated.

verified: bool

Whether this identity has been verified (e.g., JWT signature checked, API key looked up). False means the identity was extracted but not cryptographically validated.

tenant: Option<String>

Optional tenant or organization the caller belongs to.

agent_id: Option<String>

Optional agent identifier when the caller is an AI agent.

Implementations

impl CallerIdentity

pub fn anonymous() -> Self

Create an anonymous caller identity.

pub fn identity_hash(&self) -> Result<String>

Compute a stable hash of this identity for inclusion in receipts. Uses SHA-256 over the canonical JSON representation.

Trait Implementations

impl Clone for CallerIdentity

fn clone(&self) -> CallerIdentity

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CallerIdentity

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for CallerIdentity

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for CallerIdentity

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.