Struct Scope 

pub struct Scope {
    pub id: String,
    pub namespace: String,
    pub parent: String,
    pub display_name: String,
    pub origins: Vec<String>,
    pub clients: Vec<ScopeClient>,
    pub observers: Vec<String>,
    pub created_at: i64,
    pub version: u64,
    pub state: i32,
    pub return_paths: Vec<String>,
}

Fields

id: String

[a-z][a-z0-9_]{0,31}; main for the root.

namespace: String

The tenant namespace its permissions live in. Equal to id for every scope but main, which has none (empty).

parent: String

Empty for main; main for every other scope today.

display_name: String

Plain text, at most 80 bytes.

origins: Vec<String>

The https origins of the scope’s hosts (<https://invest.evinvest.ltd>), exactly as a browser sends Origin: https only; the host ends in .evinvest.ltd (the bare evinvest.ltd is PUBLIC_ORIGIN, never a scope’s); port 1-65535 and only when non-default; no path, no trailing slash, no wildcard, never null. Compared byte for byte; the answer’s Access-Control-Allow-Origin is exactly the matched origin, with Vary: Origin.

While the scope is ACTIVE or FROZEN (never once CLOSED) they widen CORS on a fixed list of sign-in routes only — /auth/code/request, /auth/code/verify, /auth/password/signin, /auth/password/signup, /auth/password/signup/confirm, /auth/password/signup/resend, /auth/passkey/signin/* and GET /auth/session, which answers them {authenticated, user, permissions} and never a token — and on the public, credential-less GET /auth/mfe/*. Everything that acts on an open session or reads the account (/auth/email/verify/*, /auth/password/set, /auth/passkey/register|remove, sessions, username, methods, /auth/me, /auth/notifications/settings*, logout, /kyc/*) accepts PUBLIC_ORIGIN alone; a scope host confirms a password sign-up with the ticket that sign-up handed it. The registry is re-read at most 30 s apart, so a CLOSED scope or a removed origin stops being answered within that. An absolute OAuth returnTo must be one of these origins plus a path from return_paths, or /auth/login answers 400.

clients: Vec<ScopeClient>

The relying-party clients signing people in for this scope. A scope may have none (main is first-party) or several.

observers: Vec<String>

The clients that may read THIS scope’s events and its users’ lifecycle besides its own: a direction that runs resources of other scopes (invest runs allocations for sa) is named on each scope it serves. Client ids. READ access to this plane’s streams and nothing else: an observer holds no right on the money plane, where a service’s grants are banking’s own configuration.

created_at: i64

Unix SECONDS.

version: u64

Bumped on every change to anything in this message; SCOPE_CHANGED carries it.

state: i32

return_paths: Vec<String>

The paths an OAuth returnTo may name on origins (/cabinet, /auth/callback), each starting with a single /, matched exactly — no prefix, no query.

Implementations

impl Scope

pub fn state(&self) -> ScopeState

Returns the enum value of state, or the default if the field is set to an invalid enum value.

pub fn set_state(&mut self, value: ScopeState)

Sets state to the provided enum value.

Trait Implementations

impl Clone for Scope

fn clone(&self) -> Scope

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Scope

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Default for Scope

fn default() -> Scope

Returns the “default value” for a type.

impl Message for Scope

fn encoded_len(&self) -> usize

Returns the encoded length of the message without a length delimiter.

fn clear(&mut self)

Clears the message, resetting all fields to their default.

fn encode(&self, buf: &mut impl BufMut) -> Result<(), EncodeError>

where Self: Sized,

Encodes the message to a buffer.

fn encode_to_vec(&self) -> Vec<u8>

where Self: Sized,

Encodes the message to a newly allocated buffer.

fn encode_length_delimited( &self, buf: &mut impl BufMut, ) -> Result<(), EncodeError>

where Self: Sized,

Encodes the message with a length-delimiter to a buffer.

fn encode_length_delimited_to_vec(&self) -> Vec<u8>

where Self: Sized,

Encodes the message with a length-delimiter to a newly allocated buffer.

fn decode(buf: impl Buf) -> Result<Self, DecodeError>

where Self: Default,

Decodes an instance of the message from a buffer.

fn decode_length_delimited(buf: impl Buf) -> Result<Self, DecodeError>

where Self: Default,

Decodes a length-delimited instance of the message from the buffer.

fn merge(&mut self, buf: impl Buf) -> Result<(), DecodeError>

where Self: Sized,

Decodes an instance of the message from a buffer, and merges it into self.

fn merge_length_delimited(&mut self, buf: impl Buf) -> Result<(), DecodeError>

where Self: Sized,

Decodes a length-delimited instance of the message from buffer, and merges it into self.

impl PartialEq for Scope

fn eq(&self, other: &Scope) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for Scope