Struct AuthClaims 

pub struct AuthClaims {
    pub did: String,
    pub role: Role,
    pub session_id: String,
    pub session_pubkey_b58btc: Option<String>,
    pub amr: Vec<String>,
    pub acr: String,
}

Extracted from a valid JWT Bearer token on protected routes.

Add this as a handler parameter to require authentication:

async fn handler(_auth: AuthClaims, ...) { }

Fields

did: String

role: Role

session_id: String

The session this token belongs to. Used by step-up to elevate the same session in place. Empty for transports without a session record (e.g. per-message DIDComm auth).

session_pubkey_b58btc: Option<String>

Ephemeral session pubkey if one was registered during login — Ed25519 multikey, base58btc-encoded with the z prefix. dispatch_trust_task uses this to verify a Data Integrity proof’s verificationMethod came from the same session that issued the JWT.

amr: Vec<String>

Authentication methods on the session’s token (["did"] base, plus "webauthn"/"vta" after a step-up).

acr: String

Assurance level on the session’s token ("aal1" base, "aal2" after a step-up). Gated by StepUpAuth.

Trait Implementations

impl Clone for AuthClaims

fn clone(&self) -> AuthClaims

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuthClaims

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl<S> FromRequestParts<S> for AuthClaims

where S: AuthState,

type Rejection = AppError

If the extractor fails it’ll use this “rejection” type. A rejection is a kind of error that can be converted into a response.

async fn from_request_parts( parts: &mut Parts, state: &S, ) -> Result<AuthClaims, <AuthClaims as FromRequestParts<S>>::Rejection>

Perform the extraction.