Struct RoleMappingConfig 

pub struct RoleMappingConfig {
    pub claim: String,
    pub mapping: HashMap<String, String>,
    pub default_deny: bool,
}

Maps JWT claim values to RBAC role names.

Fields

claim: String

JWT claim to read for role resolution (e.g. “scope”, “role”, “groups”)

mapping: HashMap<String, String>

Map claim values to role names

default_deny: bool

Default-deny policy for authenticated principals whose claim value is not present in mapping.

When false (the default, for backwards compatibility), a request that carries valid token claims but whose mapped scope is unrecognized passes through with no RBAC restriction. When true, such a request is denied.

Recommended true for gateway deployments: an authenticated principal carrying an unrecognized scope should not get unrestricted access. This only governs requests that already carry token claims; requests with no claims at all (no JWT/RBAC configured) always pass through.

Trait Implementations

impl Debug for RoleMappingConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for RoleMappingConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for RoleMappingConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.