Trait RoleResolver 

pub trait RoleResolver:
    Send
    + Sync
    + 'static {
    // Required method
    fn resolve(&self, auth: &AuthContext) -> Vec<String>;
}

Extension point for role resolution.

The default implementation returns the flat roles JWT claim. Register a custom resolver via ForgeBuilder::with_role_resolver for hierarchy expansion, group lookups, or remote permission services.

Called once per require_role check. Keep implementations cheap — the result is not cached between calls.

Required Methods

fn resolve(&self, auth: &AuthContext) -> Vec<String>

Implementors

impl RoleResolver for DefaultRoleResolver