Struct IdentityResolvePayload 

pub struct IdentityResolvePayload {
    pub raw_token: String,
    pub source: String,
    pub headers: HashMap<String, String>,
    pub client_host: Option<String>,
    pub client_port: Option<u16>,
}

identity.resolve mirrors IdentityPayload. The worker knows the hook as identity_resolve.

raw_token is SecretStr on the Python side and redacts on serialization, so the value that travels in this field is a placeholder, never the real token. The plaintext rides the separate capability-gated credential object on the task (see the credentials module) and the worker folds it back onto the payload before calling the plugin.

Debug is hand-written — see the module docs.

Fields

raw_token: String

Redacted on the wire. Populated from the credential object by the worker, not from this field.

source: String

How the credential was presented — bearer, custom, and so on.

headers: HashMap<String, String>

Headers the credential arrived in. Not a SecretStr on the Python side, so the worker scrubs the plaintext out of these values before a plugin can echo them back.

client_host: Option<String>

client_port: Option<u16>

Trait Implementations

impl Clone for IdentityResolvePayload

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for IdentityResolvePayload

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for IdentityResolvePayload

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for IdentityResolvePayload

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PluginPayload for IdentityResolvePayload

fn clone_boxed(&self) -> Box<dyn PluginPayload>

Clone this payload into a new Box<dyn PluginPayload>.

fn as_any(&self) -> &dyn Any

Downcast to a concrete type via &dyn Any.

fn as_any_mut(&mut self) -> &mut dyn Any

Downcast to a concrete type via &mut dyn Any.

fn audit_bytes(&self) -> Option<Vec<u8>>

Canonical bytes of this payload for content-addressed audit provenance, or None for a payload that cannot or should not be serialized, which is the default.

impl Serialize for IdentityResolvePayload

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.