Struct AuthorizedSessionClaims 

pub struct AuthorizedSessionClaims {
    pub issuer: String,
    pub key_id: String,
    pub session_id: String,
    pub authorization_epoch: u64,
    pub subject: SessionSubject,
    pub scopes: Vec<SessionScope>,
    pub issued_ms: u64,
    pub expires_ms: u64,
}

Claims signed into a bearer whose current authorization lives in State.

Signature verification proves only that these claims came from the session signer and remain inside their time window. An admission boundary must additionally read the session_id and credential-root epoch from State and fail closed unless both still authorize this bearer.

Fields

issuer: String

Stable signing-role issuer.

key_id: String

Exact key identity selected from the session trust set.

session_id: String

Stable identifier of the bearer record in State.

authorization_epoch: u64

Credential-root epoch recorded when State minted the bearer.

subject: SessionSubject

Credential root and its current persona resolution.

scopes: Vec<SessionScope>

Independently checked capabilities.

issued_ms: u64

Writer-attested mint time.

expires_ms: u64

Natural expiry; durable revocation may refuse it earlier.

Implementations

impl AuthorizedSessionClaims

pub fn has_scope(&self, scope: SessionScope) -> bool

Whether this bearer carries scope.

Trait Implementations

impl Clone for AuthorizedSessionClaims

fn clone(&self) -> AuthorizedSessionClaims

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuthorizedSessionClaims

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for AuthorizedSessionClaims

impl PartialEq for AuthorizedSessionClaims

fn eq(&self, other: &AuthorizedSessionClaims) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for AuthorizedSessionClaims