Enum PrincipalKind 

pub enum PrincipalKind {
    Session {
        id: i64,
    },
    ApiToken {
        id: i64,
        org: Option<OrgId>,
        name: String,
        scopes: Vec<String>,
    },
    Access,
    Superadmin {
        source: SuperadminSource,
    },
    Workspace {
        org: OrgId,
        name: String,
    },
    Agent {
        label: String,
    },
}

How a principal authenticated.

Variants

Session

Fields

id: i64

ApiToken

Fields

id: i64

org: Option<OrgId>

name: String

The token’s name, for audit rows.

scopes: Vec<String>

Empty: the role’s whole reach.

Access

A Cloudflare Access identity whose email is this user’s.

Superadmin

A superadmin (superadmin): a superadmin token or a tailnet identity, acting as this (possibly synthetic) user.

Fields

source: SuperadminSource

Workspace

An org’s workspace (docs/concepts/workspaces.md): its token (isb_ws_...), held by the agents that live in it. Nobody’s account: a synthetic principal confined to org with the role the workspace was given.

Fields

org: OrgId

name: String

The workspace’s name in its org.

Agent

A tailnet or Cloudflare Access caller an org mapped to a role (agent_identities): label is tailnet:<login or node> or access:<name>. Nobody’s account, confined to the orgs that mapped it.

Fields

label: String

Trait Implementations

impl Clone for PrincipalKind

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for PrincipalKind

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for PrincipalKind

impl PartialEq for PrincipalKind

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for PrincipalKind

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for PrincipalKind