Struct AuthBindings 

pub struct AuthBindings {
    pub provider: String,
    pub profile: String,
    pub account_id: String,
    pub credential_identity_hash: String,
    pub scopes: BTreeSet<String>,
    pub token_status: TokenStatus,
    pub refresh_available: bool,
    pub observed_at: DateTime<Utc>,
}

Secret-free identity and token-state binding for one provider account.

The credential_identity_hash is a digest over the public credential identity (for example keyring:primary or env:OPENAI_API_KEY), never the secret value. It is stable under secret rotation but changes when the credential identity or provider/profile changes, matching the existing routing authority binding.

Fields

provider: String

Provider adapter name.

profile: String

Provider profile name.

account_id: String

Public provider account identifier.

credential_identity_hash: String

Secret-free digest of the credential identity.

scopes: BTreeSet<String>

Canonically ordered granted scopes.

token_status: TokenStatus

Resolved token lifecycle state.

refresh_available: bool

Whether a refresh token is present and can be used.

observed_at: DateTime<Utc>

When the binding was produced.

Implementations

impl AuthBindings

pub fn new( provider: impl Into<String>, profile: impl Into<String>, account_id: impl Into<String>, credential_identity_hash: impl Into<String>, scopes: BTreeSet<String>, token_status: TokenStatus, refresh_available: bool, observed_at: DateTime<Utc>, ) -> Result<Self, AuthError>

Builds a binding after validating every material field.

pub fn validate(&self) -> Result<(), AuthError>

Validates identity, scope, and digest-length invariants.

pub fn digest(&self) -> Result<String, AuthError>

Computes a canonical BLAKE3 digest over the validated binding JSON.

Trait Implementations

impl Clone for AuthBindings

fn clone(&self) -> AuthBindings

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuthBindings

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for AuthBindings

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for AuthBindings

impl PartialEq for AuthBindings

fn eq(&self, other: &AuthBindings) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for AuthBindings

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for AuthBindings