Struct AuthContext 

pub struct AuthContext {
    pub principal: String,
    pub method: AuthMethod,
    pub claims: HashMap<String, Value>,
    pub admin: bool,
    pub namespaces: Vec<String>,
}

Authentication context attached to each request.

Fields

principal: String

The principal name (e.g., key name, JWT subject, certificate CN).

method: AuthMethod

Which authentication method was used.

claims: HashMap<String, Value>

Additional claims from JWT (empty for API key / mTLS).

admin: bool

Whether this credential may perform administrative operations.

Carried on the credential rather than derived from a policy engine, because the policy engine is optional and “no policy” must not mean “everyone is an admin”.

namespaces: Vec<String>

Namespaces this credential may act in; empty means unrestricted.

Authentication answers who is calling; this answers whose data they may touch. Keeping the second on the credential is what stops a valid key from reading another tenant simply by changing a header.

Implementations

impl AuthContext

pub fn allows_namespace(&self, namespace: &str) -> bool

Whether this credential may act in namespace.

Trait Implementations

impl Clone for AuthContext

fn clone(&self) -> AuthContext

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuthContext

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.