Struct RawDelegatedToken 

pub struct RawDelegatedToken {
    pub token: Zeroizing<String>,
    pub outbound_header: String,
    pub audience: String,
    pub scopes: Vec<String>,
    pub expires_at: DateTime<Utc>,
}

One minted outbound credential, produced by a TokenDelegate handler and cached for re-use until expiry. The token field is serde-skipped under the same invariant as RawInboundToken.token.

Fields

token: Zeroizing<String>

The minted outbound credential. Cleared on drop.

outbound_header: String

Where the consuming plugin should attach the token on the upstream request. Often "Authorization", sometimes audience-specific.

audience: String

The audience the token was minted for. Cache keys include this; the field here is for audit / debugging.

scopes: Vec<String>

Effective scopes on the minted token. May be narrower than the inbound credential’s scopes — monotonic narrowing is a framework-level invariant enforced by TokenDelegate.

expires_at: DateTime<Utc>

Cache eviction trigger. Handlers re-mint when now >= expires_at - safety_margin.

Implementations

impl RawDelegatedToken

pub fn new( token: impl Into<String>, outbound_header: impl Into<String>, audience: impl Into<String>, scopes: Vec<String>, expires_at: DateTime<Utc>, ) -> Self

Trait Implementations

impl Clone for RawDelegatedToken

fn clone(&self) -> RawDelegatedToken

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for RawDelegatedToken

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for RawDelegatedToken

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for RawDelegatedToken

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.