Struct AuthUser

pub struct AuthUser {
    pub id: String,
    pub account: String,
    pub label: String,
    pub is_admin: bool,
    pub sequence_number: i64,
    pub created_at: DateTime<Utc>,
    pub updated_at: DateTime<Utc>,
    pub csrf_token: String,
    pub csrf_via_header_verified: bool,
}

Authenticated user information, available as an Axum extractor

This struct represents an authenticated user and can be used as an extractor in Axum route handlers. When used as an extractor, it checks for a valid session cookie and automatically verifies CSRF token requirements for state-changing methods (POST, PUT, DELETE, PATCH).

Fields

• id - Unique user identifier
• account - User’s account name (email or username)
• label - User’s display name
• is_admin - Whether the user has admin privileges
• sequence_number - User version for tracking account changes
• created_at - When the user account was created
• updated_at - When the user account was last updated
• csrf_token - CSRF token associated with the user’s session
• csrf_via_header_verified - Whether CSRF token was verified via header

Example

use axum::{routing::get, Router};
use oauth2_passkey_axum::AuthUser;

async fn protected_handler(user: AuthUser) -> String {
    format!("Hello, {}!", user.label)
}

let app: Router = Router::new()
    .route("/protected", get(protected_handler));

Fields

id: String

Unique user identifier

account: String

User’s account name (email or username)

label: String

User’s display name

is_admin: bool

Whether the user has admin privileges

sequence_number: i64

User version for tracking account changes

created_at: DateTime<Utc>

When the user account was created

updated_at: DateTime<Utc>

When the user account was last updated

csrf_token: String

CSRF token associated with the user’s session

csrf_via_header_verified: bool

Whether CSRF token was verified via header

Trait Implementations

impl Clone for AuthUser

fn clone(&self) -> AuthUser

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuthUser

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl From<&AuthUser> for SessionUser

fn from(auth_user: &AuthUser) -> Self

Converts to this type from the input type.

impl From<User> for AuthUser

fn from(session_user: SessionUser) -> Self

Converts to this type from the input type.

impl<B> FromRequestParts<B> for AuthUser

where B: Send + Sync,

type Rejection = AuthRedirect

If the extractor fails it’ll use this “rejection” type. A rejection is a kind of error that can be converted into a response.

async fn from_request_parts( parts: &mut Parts, _: &B, ) -> Result<Self, Self::Rejection>

Perform the extraction.

impl<B> OptionalFromRequestParts<B> for AuthUser

where B: Send + Sync,

type Rejection = AuthRedirect

If the extractor fails, it will use this “rejection” type.

async fn from_request_parts( parts: &mut Parts, state: &B, ) -> Result<Option<Self>, Self::Rejection>

Perform the extraction.