Struct AuthContext 

pub struct AuthContext { /* private fields */ }

Authentication context available to all functions.

Implementations

impl AuthContext

pub fn unauthenticated() -> Self

Create an unauthenticated context.

pub fn authenticated( user_id: Uuid, roles: Vec<String>, claims: HashMap<String, Value>, ) -> Self

Create an authenticated context with a UUID user ID.

pub fn authenticated_without_uuid( roles: Vec<String>, claims: HashMap<String, Value>, ) -> Self

Create an authenticated context without requiring a UUID user ID.

Use this for auth providers that don’t use UUID subjects (e.g., Firebase, Clerk). The raw subject string is available via subject() method from the “sub” claim.

pub fn is_authenticated(&self) -> bool

Check if the user is authenticated.

pub fn user_id(&self) -> Option<Uuid>

Get the user ID if authenticated.

pub fn require_user_id(&self) -> Result<Uuid>

Get the user ID, returning an error if not authenticated.

pub fn has_role(&self, role: &str) -> bool

Check if the user has a specific role.

pub fn require_role(&self, role: &str) -> Result<()>

Require a specific role, returning an error if not present.

pub fn claim(&self, key: &str) -> Option<&Value>

Get a custom claim value.

pub fn claims(&self) -> &HashMap<String, Value>

Get all custom claims.

pub fn roles(&self) -> &[String]

Get all roles.

pub fn subject(&self) -> Option<&str>

Get the raw subject claim.

This works with any provider’s subject format (UUID, email, custom ID). For providers like Firebase or Clerk that don’t use UUIDs, use this instead of user_id().

pub fn require_subject(&self) -> Result<&str>

Like require_user_id() but returns the raw subject string for non-UUID providers.

pub fn principal_id(&self) -> Option<String>

Get a stable principal identifier for access control and cache scoping.

Prefers the raw JWT sub claim and falls back to UUID user_id.

pub fn is_admin(&self) -> bool

Check whether this principal should be treated as privileged admin.

Trait Implementations

impl Clone for AuthContext

fn clone(&self) -> AuthContext

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuthContext

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.