Struct Auth 

pub struct Auth(pub AuthenticatedIdentity);

Extracts the AuthenticatedIdentity for the current request.

Available inside #[tool], #[resource], and #[prompt] handlers when the auth feature is enabled and the server is configured with an auth provider.

Returns McpError::Unauthorized if the request is unauthenticated.

Example

use mcp_kit::prelude::*;
use mcp_kit::Auth;

#[mcp_kit::tool(description = "A protected tool")]
async fn my_tool(input: String, auth: Auth) -> McpResult<CallToolResult> {
    if !auth.has_scope("tools:execute") {
        return Err(McpError::Unauthorized("missing scope".into()));
    }
    Ok(CallToolResult::text(format!("Hello, {}!", auth.subject)))
}

Tuple Fields

0: AuthenticatedIdentity

Implementations

impl Auth

pub fn from_context() -> McpResult<Self>

Pull the current identity from the task-local auth context. Returns Err(McpError::Unauthorized) if no identity is present.

Methods from Deref<Target = AuthenticatedIdentity>

pub fn has_scope(&self, scope: &str) -> bool

Returns true if this identity has the given scope.

pub fn has_all_scopes(&self, scopes: &[&str]) -> bool

Returns true if this identity has all of the given scopes.

Trait Implementations

impl Deref for Auth

Available on crate feature auth only.

type Target = AuthenticatedIdentity

The resulting type after dereferencing.

fn deref(&self) -> &Self::Target

Dereferences the value.