Struct TokenDelegatePayload 

pub struct TokenDelegatePayload {
    pub target_name: String,
    pub target_type: String,
    pub target_audience: Option<String>,
    pub required_permissions: Vec<String>,
    pub trust_domain: Option<String>,
    pub auth_enforced_by: String,
    pub route_attenuation: Option<AttenuationConfig>,
    pub bearer_token: Option<String>,
}

token.delegate mirrors DelegationPayload. The worker knows the hook as token_delegate.

bearer_token is SecretStr | None on the Python side and redacts on serialization, so this field carries a placeholder. The plaintext travels via the credential object.

Debug is hand-written — see the module docs.

Fields

target_name: String

target_type: String

target_audience: Option<String>

required_permissions: Vec<String>

trust_domain: Option<String>

auth_enforced_by: String

route_attenuation: Option<AttenuationConfig>

bearer_token: Option<String>

Redacted on the wire; the plaintext comes from the credential object.

Trait Implementations

impl Clone for TokenDelegatePayload

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for TokenDelegatePayload

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for TokenDelegatePayload

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for TokenDelegatePayload

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PluginPayload for TokenDelegatePayload

fn clone_boxed(&self) -> Box<dyn PluginPayload>

Clone this payload into a new Box<dyn PluginPayload>.

fn as_any(&self) -> &dyn Any

Downcast to a concrete type via &dyn Any.

fn as_any_mut(&mut self) -> &mut dyn Any

Downcast to a concrete type via &mut dyn Any.

fn audit_bytes(&self) -> Option<Vec<u8>>

Canonical bytes of this payload for content-addressed audit provenance, or None for a payload that cannot or should not be serialized, which is the default.

impl Serialize for TokenDelegatePayload

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.