Struct Authenticated 

pub struct Authenticated {
    pub user_id: Uuid,
    pub method: AuthMethod,
}

An authenticated caller, either via API key or JWT.

If the Authorization: Bearer token starts with irfl_, API key auth is used. Otherwise, JWT auth is attempted (cookie first, then header).

Examples

use ironflow_auth::extractor::Authenticated;

async fn protected(auth: Authenticated) -> String {
    format!("User {}", auth.user_id)
}

Fields

user_id: Uuid

The authenticated user’s ID.

method: AuthMethod

The authentication method used.

Implementations

impl Authenticated

pub fn is_admin(&self) -> bool

Whether the authenticated caller has admin privileges.

For JWT users, checks the is_admin claim. For API key users, checks the owner’s current admin status (fetched at request time, so demotions take effect immediately).

Trait Implementations

impl Clone for Authenticated

fn clone(&self) -> Authenticated

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Authenticated

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<S> FromRequestParts<S> for Authenticated

where S: Send + Sync, Arc<JwtConfig>: FromRef<S>, Arc<dyn ApiKeyStore>: FromRef<S>, Arc<dyn UserStore>: FromRef<S>,

type Rejection = AuthRejection

If the extractor fails it’ll use this “rejection” type. A rejection is a kind of error that can be converted into a response.

async fn from_request_parts( parts: &mut Parts, state: &S, ) -> Result<Self, Self::Rejection>

Perform the extraction.