Struct ServiceAccountConfig 

pub struct ServiceAccountConfig {
    pub secret_env: String,
    pub roles: Vec<String>,
    pub scopes: Vec<String>,
    pub tenant: Option<String>,
    pub static_enriched: HashMap<String, Value>,
}

A [service_accounts.<name>] config block. Holds only non-secret material — the secret plaintext lives in the environment variable named by secret_env.

Fields

secret_env: String

Name of the environment variable holding the plaintext bearer secret. The secret is never inlined; the config holds only this name.

roles: Vec<String>

The run_as ceiling — roles granted. Empty ⇒ no role authority.

scopes: Vec<String>

The run_as ceiling — scopes granted. Empty ⇒ no scope authority.

tenant: Option<String>

Optional tenant pin. Omitted ⇒ global / NULL tenant.

static_enriched: HashMap<String, Value>

Optional server-injected fraiseql.enriched.* fields, the only sanctioned deviation from uniform enrichment (ADR-0016 decision 6 / ADR-0018 decision 5) — for a daemon with no natural actor row. Server-injected, never token-asserted.

Trait Implementations

impl Clone for ServiceAccountConfig

fn clone(&self) -> ServiceAccountConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ServiceAccountConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for ServiceAccountConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.