Struct Claims 

pub struct Claims {
    pub subject: String,
    pub issued_at: u32,
    pub expires_at: u32,
    pub audience: String,
    pub roles: Vec<Role>,
    pub scopes: Vec<Scope>,
    pub jti: Uuid,
}

The validated, decoded claims from a KWT token. All fields that appear in the binary format are represented here.

fmt::Debug is redacted (lengths only for strings, no jti value) so println!("{claims:?}") in servers does not leak identifiers into logs.

Fields

subject: String

Subject identifier. Alphanumeric, max MAX_SUBJECT_BYTES UTF-8 bytes.

issued_at: u32

Unix timestamp (seconds) when the token was issued.

expires_at: u32

Unix timestamp (seconds) after which the token must be rejected.

audience: String

Intended audience. Must exactly match the server’s registered audience (max MAX_AUDIENCE_BYTES UTF-8 bytes).

roles: Vec<Role>

Authorization roles granted to this token.

scopes: Vec<Scope>

API scopes granted to this token.

jti: Uuid

JWT ID — UUID v7 for replay detection.

Implementations

impl Claims

pub fn validate_structure(&self) -> Result<(), KwtError>

Validate structural integrity (not expiry — that’s the token layer’s job).

Trait Implementations

impl Clone for Claims

fn clone(&self) -> Claims

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Claims

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.