Struct AuthContext 

pub struct AuthContext {
    pub user_id: Option<String>,
    pub is_admin: bool,
    pub is_guest: bool,
    pub roles: Vec<String>,
    pub tenant_id: Option<String>,
    pub api_key_id: Option<String>,
    pub api_key_scopes: Option<String>,
}

The auth context for a request. Represents who is making the request.

Do NOT derive Deserialize on this type. If the server ever parses an AuthContext from client-supplied JSON, a client can set is_admin=true or add roles and bypass every policy. Identity must come from server-minted sessions (Session::to_auth_context) or explicit constructors, never from deserialization.

Serialize is safe because sending the resolved context BACK to the client exposes nothing the server didn’t already decide.

Fields

user_id: Option<String>

The authenticated user ID, or None for public/anonymous access. For guest contexts this is Some(guest_id) — a stable anonymous identifier, NOT a real user.

is_admin: bool

Whether this is an admin context (bypasses policies).

is_guest: bool

True for AuthContext::guest() — anonymous-with-stable-id, used for cart state and similar pre-login persistence. Routes guarded by AuthMode::User reject guests; only is_authenticated() == “real signed-in user” should pass auth-required gates.

roles: Vec<String>

Roles granted to this user. Empty for anonymous.

tenant_id: Option<String>

Active tenant id (for multi-tenant apps). Set when the user has selected an organization for the current session.

api_key_id: Option<String>

API key id when the request was authenticated via a pk.… bearer token. Set so policies + management endpoints can distinguish “user-via-session” from “user-via-key” — e.g. password change is forbidden via API key.

api_key_scopes: Option<String>

Comma-separated scope string from the API key. Application policies decide what scopes mean — pylon only carries them.

Implementations

impl AuthContext

pub fn anonymous() -> Self

Create an anonymous/public auth context.

pub fn authenticated(user_id: String) -> Self

Create an authenticated auth context.

pub fn from_api_key( user_id: String, key_id: String, scopes: Option<String>, ) -> Self

Create an authenticated context backed by an API key. Policies + auth-management endpoints can detect this via is_api_key_auth().

pub fn is_api_key_auth(&self) -> bool

True iff this request was authenticated by an API key (not a session cookie / bearer session token).

pub fn guest(guest_id: String) -> Self

Create a guest auth context with a persistent anonymous ID. Guests carry an opaque stable id (cart/session continuity) but are NOT considered authenticated — is_authenticated() returns false and AuthMode::User rejects them.

pub fn admin() -> Self

Create an admin auth context that bypasses all policies.

pub fn user(user_id: String) -> Self

Convenience: build a user context from a user id.

pub fn tenant_id(&self) -> Option<&str>

Active tenant id (None when the user hasn’t selected an org).

pub fn with_tenant(self, tenant_id: String) -> Self

Attach a tenant id to the context (chainable).

pub fn is_authenticated(&self) -> bool

Check if this context represents an authenticated user. Guests intentionally return false — they have a stable anonymous id but never gain user-level access.

pub fn has_role(&self, role: &str) -> bool

Check if the user has a specific role. Admins have every role implicitly.

pub fn has_any_role(&self, roles: &[&str]) -> bool

Check if the user has ANY of the given roles.

pub fn with_roles(self, roles: Vec<String>) -> Self

Attach roles to the context (chainable).

Trait Implementations

impl Clone for AuthContext

fn clone(&self) -> AuthContext

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuthContext

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for AuthContext

fn eq(&self, other: &AuthContext) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for AuthContext

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl Eq for AuthContext

impl StructuralPartialEq for AuthContext