Enum Role 

pub enum Role {
    Admin,
    Owner,
    Service,
}

Roles that determine endpoint access permissions.

The role of a JWT-authenticated request gates which *Auth extractor will accept it:

• Admin → AdminAuth (and AuthClaims).
• Owner → AuthClaims only; admin-only routes reject.
• Service → ServiceAuth (and AuthClaims); admin-only routes reject.

Service is for backend service accounts that register with the control plane and push sync data. As of v0.7 it is required by POST /api/control/register-service (a service registering its public URL) and POST /api/control/stats (a service pushing stats deltas). A token minted for a Service-role DID will neither be accepted by admin-only routes nor by the public DID- management routes a tenant would use — service accounts are deliberately scoped down.

Variants

Admin

Owner

Service

Service accounts (e.g. did-hosting-server registering with the control plane). Can authenticate and use the service-only endpoints (register-service, stats); cannot access admin management endpoints or tenant DID-management routes.

Trait Implementations

impl Clone for Role

fn clone(&self) -> Role

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Role

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for Role

fn deserialize<__D>( __deserializer: __D, ) -> Result<Role, <__D as Deserializer<'de>>::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Display for Role

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl FromStr for Role

type Err = AppError

The associated error which can be returned from parsing.

fn from_str(s: &str) -> Result<Role, <Role as FromStr>::Err>

Parses a string s to return a value of this type.

impl PartialEq for Role

fn eq(&self, other: &Role) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for Role

fn serialize<__S>( &self, __serializer: __S, ) -> Result<<__S as Serializer>::Ok, <__S as Serializer>::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for Role