Struct PortableAuthority 

pub struct PortableAuthority<'a> {
    pub audience: &'a AudienceId,
    pub issuer: Principal,
    pub mechanism: PortableMechanism,
    pub key_binding_id: [u8; 32],
    pub grants: &'a [DelegatedRoleGrant],
    pub caller: Principal,
    pub now_ns: u64,
    pub authority_not_before_ns: u64,
    pub authority_expires_at_ns: u64,
    pub enrollment_expires_at_ns: u64,
    pub min_login_started_at_ns: u64,
}

Protected runtime and active enrollment inputs, never inferred from claims. The host must select current, unrevoked authority under its transaction lock. Generation, login revocation, replay and atomic session writes remain host/ session-engine obligations; this context cannot attest its own provenance.

Fields

audience: &'a AudienceId

issuer: Principal

mechanism: PortableMechanism

key_binding_id: [u8; 32]

grants: &'a [DelegatedRoleGrant]

caller: Principal

Actual authenticated ingress sender, not an account subject or request field.

now_ns: u64

authority_not_before_ns: u64

authority_expires_at_ns: u64

enrollment_expires_at_ns: u64

min_login_started_at_ns: u64

Immutable login start floor, including the host’s qualified reset margin.

Trait Implementations

impl<'a> Clone for PortableAuthority<'a>

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<'a> Copy for PortableAuthority<'a>

impl<'a> Debug for PortableAuthority<'a>

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.