Struct Authenticated 

pub struct Authenticated {
    pub user_id: Uuid,
    pub method: AuthMethod,
}

An authenticated caller, either via API key or JWT.

If the Authorization: Bearer token starts with irfl_, API key auth is used. Otherwise, JWT auth is attempted (cookie first, then header).

Examples

use ironflow_auth::extractor::Authenticated;

async fn protected(auth: Authenticated) -> String {
    format!("User {}", auth.user_id)
}

Fields

user_id: Uuid

The authenticated user’s ID.

method: AuthMethod

The authentication method used.

Implementations

impl Authenticated

pub fn is_admin(&self) -> bool

Whether the authenticated caller has admin privileges.

For JWT users, checks the user’s current admin status, read from the store at request time (the token’s is_admin claim is not trusted for a stored user, and a role change revokes the token). For API key users, checks the owner’s current admin status (fetched at request time, so demotions take effect immediately).

Trait Implementations

impl Clone for Authenticated

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Authenticated

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<S> FromRequestParts<S> for Authenticated

where S: Send + Sync, Arc<JwtConfig>: FromRef<S>, Arc<dyn Store>: FromRef<S>,

type Rejection = AuthRejection

If the extractor fails it’ll use this “rejection” type. A rejection is a kind of error that can be converted into a response.

async fn from_request_parts( parts: &mut Parts, state: &S, ) -> Result<Self, Self::Rejection>

Perform the extraction.