Struct SecurityContext 

pub struct SecurityContext { /* private fields */ }

SecurityContext encapsulates the security-related information for a request or operation.

Built by the AuthN Resolver during authentication and passed through the request lifecycle. Modules use this context together with the AuthZ Resolver to obtain access scopes.

Implementations

impl SecurityContext

pub fn builder() -> SecurityContextBuilder

Create a new SecurityContext builder

pub fn anonymous() -> Self

Create an anonymous SecurityContext with no tenant, subject, or permissions.

Use this for unauthenticated / dev / auth-disabled contexts where no authenticated subject exists.

pub fn subject_id(&self) -> Uuid

Get the subject ID (user, service, or system) associated with the security context

pub fn subject_type(&self) -> Option<&str>

Get the subject type classification (e.g., “user”, “service”).

pub fn subject_tenant_id(&self) -> Uuid

Get the subject’s home tenant ID (from AuthN token).

pub fn token_scopes(&self) -> &[String]

Get the token scopes. ["*"] means first-party / unrestricted.

pub fn bearer_token(&self) -> Option<&SecretString>

Get the original bearer token (for PDP forwarding).

Trait Implementations

impl Clone for SecurityContext

fn clone(&self) -> SecurityContext

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SecurityContext

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for SecurityContext

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for SecurityContext

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.