Enum TokenSource 

#[non_exhaustive]
pub enum TokenSource {
    Bearer,
    UserToken,
    Mtls,
    SpiffeJwtSvid,
    ApiKey,
    Custom(String),
}

Where the raw credential was extracted from. Lets handlers short-circuit on payloads they don’t service (an mTLS-only resolver ignores Bearer payloads). Custom(String) is the escape hatch for bespoke wire formats.

Variants (Non-exhaustive)

Non-exhaustive enums could have additional variants added in future. Therefore, when matching against variants of non-exhaustive enums, an extra wildcard arm must be added to account for any future variants.

Bearer

Authorization: Bearer <jwt> style.

UserToken

X-User-Token style — explicit user-identity header alongside a separate gateway-access token in Authorization.

Mtls

mTLS — credential is the peer X.509 chain (surfaced via X-Forwarded-Client-Cert). raw_token may be empty in this case; the chain itself flows through headers.

SpiffeJwtSvid

SPIFFE JWT-SVID — JWT-shaped but with SPIFFE-specific claims.

ApiKey

API key in a header or query param.

Custom(String)

Operator-defined extraction path.

Trait Implementations

impl Clone for TokenSource

fn clone(&self) -> TokenSource

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for TokenSource

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for TokenSource

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for TokenSource

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for TokenSource

impl Hash for TokenSource

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl PartialEq for TokenSource

fn eq(&self, other: &TokenSource) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for TokenSource

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for TokenSource