Struct InboundCredential 

pub struct InboundCredential {
    pub token: String,
    pub source_header: String,
    pub kind: String,
    pub headers: Option<HashMap<String, String>>,
}

credential.inbound: built from RawInboundToken, for identity.resolve.

The worker maps these onto IdentityPayload: token → raw_token, kind → source, headers → headers (with the plaintext scrubbed out of the values, since IdentityPayload.headers does not redact on serialization).

Fields

token: String

The plaintext, read straight from the in-memory Zeroizing field.

source_header: String

Header the credential arrived in.

kind: String

Wire-format family — jwt, opaque, spiffe_jwt, ucan, txn_token.

headers: Option<HashMap<String, String>>

Headers to forward. Synthesized as {source_header: token} when the extension carries none, so a header-driven extractor still learns which header carried the credential.

Trait Implementations

impl Clone for InboundCredential

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for InboundCredential

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Serialize for InboundCredential

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.