Struct TokenResponse 

pub struct TokenResponse {
    pub session_id: String,
    pub subject: String,
    pub access_token: String,
    pub access_expires_at: u64,
    pub refresh_token: String,
    pub refresh_expires_at: u64,
    pub issued_at: u64,
    pub amr: Vec<String>,
    pub acr: String,
}

Response payload returned to clients after successful authentication. Carries the absolute access/refresh expiries + the JWT’s AAL claims so the route handler can synthesise the canonical AuthenticateResponse { session, tokens } shape without re-deriving them.

Fields

session_id: String

subject: String

access_token: String

access_expires_at: u64

refresh_token: String

refresh_expires_at: u64

issued_at: u64

Issuance moment (Unix seconds). The canonical wire encodes this as session.issuedAt; expiresIn = access_expires_at - issued_at.

amr: Vec<String>

Authentication methods references — ["did"] for the challenge-response path, augmented by step-up handlers.

acr: String

Authentication context class — "aal1" for single-factor, "aal2" after step-up.

Implementations

impl TokenResponse

pub fn into_canonical(self) -> AuthenticateResponse

Convert to the canonical AuthenticateResponse { session, tokens } wire shape. The route handler calls this once and returns Json(token_resp.into_canonical()).

Trait Implementations

impl Debug for TokenResponse

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Serialize for TokenResponse

fn serialize<__S>( &self, __serializer: __S, ) -> Result<<__S as Serializer>::Ok, <__S as Serializer>::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.