Struct RouteIdentityStep 

pub struct RouteIdentityStep {
    pub name: String,
    pub config_override: Option<Value>,
    pub on_error: Option<String>,
    pub extra: HashMap<String, Value>,
}

One step in the identity-phase pipeline. Points at a plugin registered under the identity.resolve hook, optionally with a per-call config override and an on_error policy that controls what happens when the step fails.

Cumulative stacking

At runtime, every step in the block runs (subject to its own on_error). Each step’s resolved IdentityPayload accumulates — handlers contribute orthogonal slots (JWT → subject; SPIFFE → caller_workload; agent resolver → agent) so they compose without collision in the common case.

On-error semantics

• None or Some("continue") — soft failure: the step’s contribution is dropped, the next step runs, and any missing extensions get caught later by require(authenticated) / require(workload.*) in downstream policy.
• Some("deny") — hard requirement: a failure halts the request with the plugin’s violation code.

Unknown strings parse as best-effort; future slices may introduce typed enums.

Per-step config override

config_override reuses the existing per-call override pathway. When present, the framework’s create_override_instance builds a new plugin instance with the merged config and dispatches into it for this route.

Fields

name: String

Plugin name — must match an entry in the top-level plugins: block that registers under identity.resolve.

config_override: Option<Value>

Optional config override applied for this step only. None means “use the plugin’s configured defaults from the plugins: declaration.” Stored as serde_json::Value to match the existing create_override_instance interface.

on_error: Option<String>

Per-step failure handling. See type-level docs.

extra: HashMap<String, Value>

Catch-all for any other fields a future schema version adds (timeout, priority, condition, …) — preserved so the parser doesn’t reject configs targeting newer runtimes.

Implementations

impl RouteIdentityStep

pub fn bare(name: impl Into<String>) -> Self

Convenience for tests / programmatic construction: build a bare step that just names a plugin with no overrides.

Trait Implementations

impl Clone for RouteIdentityStep

fn clone(&self) -> RouteIdentityStep

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for RouteIdentityStep

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for RouteIdentityStep

fn default() -> RouteIdentityStep

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for RouteIdentityStep

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for RouteIdentityStep

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.