Struct AuthClaims 

pub struct AuthClaims {
    pub sub: String,
    pub roles: Vec<String>,
    pub exp: u64,
    pub iss: Option<String>,
    pub aud: Option<String>,
}

Standard claims decoded from a JWT (Bearer or session cookie).

Include roles as a JSON array of strings in the token payload, for example: {"sub":"user-1","roles":["admin","user"],"exp":...}.

Fields

sub: String

Subject (typically user id).

roles: Vec<String>

Role names for crate::auth::RequireRole and AuthClaims::has_role.

exp: u64

Expiration time (Unix seconds). Required for validation.

iss: Option<String>

Issuer — include when validating with crate::auth::AuthConfig::with_issuer.

aud: Option<String>

Audience — include when validating with crate::auth::AuthConfig::with_audience.

Implementations

impl AuthClaims

pub fn new(sub: impl Into<String>, roles: Vec<String>, ttl_secs: u64) -> Self

Build claims with exp set to now + ttl_secs.

pub fn has_role(&self, role: &str) -> bool

Returns true if role is present in Self::roles.

pub fn has_any_role(&self, roles: &[&str]) -> bool

Returns true if the principal has any of the given roles.

pub fn has_all_roles(&self, roles: &[&str]) -> bool

Returns true if the principal has all of the given roles.

Trait Implementations

impl Clone for AuthClaims

fn clone(&self) -> AuthClaims

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuthClaims

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for AuthClaims

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for AuthClaims

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.