Struct AccessTokenResponse 

pub struct AccessTokenResponse {
    pub token: String,
    pub subject: String,
    pub expires_at: Option<Timestamp>,
    pub session_id: String,
    pub amr: Vec<String>,
    pub credential_id: String,
    pub grant_envelope: Vec<u8>,
    pub owner_authorization: Option<OwnerAuthorizationBundle>,
}

Fields

token: String

The Biscuit (base64url-encoded). Goes in the heddle_session cookie for browser flows and in the CLI credentials store for device-bound flows.

subject: String

expires_at: Option<Timestamp>

Unix-seconds expiry. The Biscuit also carries this internally, but exposing it explicitly lets clients know when to renew without parsing the token.

session_id: String

The Biscuit’s session() fact (also its revocation id). Stable public id surfaced in the Active Sessions UI; argument to RevokeSession.

amr: Vec<String>

credential_id: String

issued_credentials.id for tokens minted from a long-lived credential row (device, service-account, agent). Empty for browser sessions.

grant_envelope: Vec<u8>

👎Deprecated

DEPRECATED, but still live and unchanged during cutover A1: Server-issued GrantEnvelope authenticating the client’s pubkey + session for biscuit minting. Existing Weft/Heddle consumers continue to use this as their single old authority until the later atomic cutover.

owner_authorization: Option<OwnerAuthorizationBundle>

Owner-authored bundle returned without re-signing or reinterpretation. Empty until owner evidence is available; it does not supersede grant_envelope during this additive preparation step.

Trait Implementations

impl Clone for AccessTokenResponse

fn clone(&self) -> AccessTokenResponse

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AccessTokenResponse

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for AccessTokenResponse

fn default() -> Self

Returns the “default value” for a type.

impl Message for AccessTokenResponse

fn encoded_len(&self) -> usize

Returns the encoded length of the message without a length delimiter.

fn clear(&mut self)

Clears the message, resetting all fields to their default.

fn encode(&self, buf: &mut impl BufMut) -> Result<(), EncodeError>

where Self: Sized,

Encodes the message to a buffer.

fn encode_to_vec(&self) -> Vec<u8>

where Self: Sized,

Encodes the message to a newly allocated buffer.

fn encode_length_delimited( &self, buf: &mut impl BufMut, ) -> Result<(), EncodeError>

where Self: Sized,

Encodes the message with a length-delimiter to a buffer.

fn encode_length_delimited_to_vec(&self) -> Vec<u8>

where Self: Sized,

Encodes the message with a length-delimiter to a newly allocated buffer.

fn decode(buf: impl Buf) -> Result<Self, DecodeError>

where Self: Default,

Decodes an instance of the message from a buffer.

fn decode_length_delimited(buf: impl Buf) -> Result<Self, DecodeError>

where Self: Default,

Decodes a length-delimited instance of the message from the buffer.

fn merge(&mut self, buf: impl Buf) -> Result<(), DecodeError>

where Self: Sized,

Decodes an instance of the message from a buffer, and merges it into self.

fn merge_length_delimited(&mut self, buf: impl Buf) -> Result<(), DecodeError>

where Self: Sized,

Decodes a length-delimited instance of the message from buffer, and merges it into self.

impl PartialEq for AccessTokenResponse

fn eq(&self, other: &AccessTokenResponse) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for AccessTokenResponse