Struct VerifiedIdToken 

pub struct VerifiedIdToken { /* private fields */ }

The claims of an ID token whose signature, issuer, audience and lifetime IdTokenVerifier::verify checked. Only the verifier creates it.

Implementations

impl VerifiedIdToken

pub fn audience(&self) -> &IdTokenAudience

The aud claim, which is the verifier’s audience.

pub fn subject(&self) -> &str

The sub claim: the principal’s unique, stable ID.

pub fn email(&self) -> Option<&PrincipalEmail>

The email claim, present when the token was minted with the principal’s email, whether or not Google verified it.

pub fn email_verified(&self) -> Option<bool>

The email_verified claim.

pub fn verified_email(&self) -> Option<&PrincipalEmail>

The email when the token says Google verified it: the principal to authorize.

pub fn hosted_domain(&self) -> Option<&str>

The hd claim: the Google Workspace or Cloud Identity domain of a user.

pub fn expires_at(&self) -> Timestamp

The exp claim.

Trait Implementations

impl Clone for VerifiedIdToken

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for VerifiedIdToken

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<S: Send + Sync> FromRequestParts<S> for VerifiedIdToken

The claims of the token VerifyIdTokenLayer verified for this request.

Rejects with 500 when the route is not behind a VerifyIdTokenLayer, since that is a mistake in the server, not in the request.

type Rejection = StatusCode

If the extractor fails it’ll use this “rejection” type. A rejection is a kind of error that can be converted into a response.

async fn from_request_parts( parts: &mut Parts, _state: &S, ) -> Result<Self, Self::Rejection>

Perform the extraction.