Struct AuthContext 

pub struct AuthContext { /* private fields */ }

Authentication context available to all functions.

Implementations

impl AuthContext

pub fn unauthenticated() -> Self

Create an unauthenticated context.

pub fn authenticated( user_id: Uuid, roles: Vec<String>, claims: HashMap<String, Value>, ) -> Self

Create an authenticated context with a UUID user ID.

pub fn authenticated_without_uuid( roles: Vec<String>, claims: HashMap<String, Value>, ) -> Self

Create an authenticated context without requiring a UUID user ID.

Use this for auth providers that don’t use UUID subjects (e.g., Firebase, Clerk). The raw subject string is available via subject() method from the “sub” claim.

pub fn is_authenticated(&self) -> bool

Check if the user is authenticated.

pub fn user_id(&self) -> Option<Uuid>

Get the user ID if authenticated.

pub fn require_user_id(&self) -> Result<Uuid>

Get the user ID, returning an error if not authenticated.

pub fn has_role(&self, role: &str) -> bool

Check if the user has a specific role.

pub fn require_role(&self, role: &str) -> Result<()>

Require a specific role, returning an error if not present.

pub fn claim(&self, key: &str) -> Option<&Value>

Get a custom claim value.

pub fn roles(&self) -> &[String]

Get all roles.

pub fn subject(&self) -> Option<&str>

Get the raw subject claim.

This works with any provider’s subject format (UUID, email, custom ID). For providers like Firebase or Clerk that don’t use UUIDs, use this instead of user_id().

pub fn require_subject(&self) -> Result<&str>

Like require_user_id() but returns the raw subject string for non-UUID providers.

Trait Implementations

impl Clone for AuthContext

fn clone(&self) -> AuthContext

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuthContext

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.