Struct SuperAdminToken 

pub struct SuperAdminToken { /* private fields */ }

An opaque token that authorizes RLS bypass.

Create via one of the named constructors:

• SuperAdminToken::for_system_process — cron, startup, cross-tenant internals
• SuperAdminToken::for_webhook — inbound callbacks
• SuperAdminToken::for_auth — login, register, token refresh

External code cannot fabricate this token — it has a private field and no public field constructor.

Usage

let token = SuperAdminToken::for_system_process("cron::cleanup");
let ctx = RlsContext::super_admin(token);
assert!(ctx.bypasses_rls());

Implementations

impl SuperAdminToken

pub fn for_system_process(_reason: &str) -> Self

Issue a token for a system/background process.

Use for cron jobs, startup introspection, and internal cross-tenant maintenance paths. For shared/public reference data, prefer RlsContext::global() instead of bypass.

The _reason parameter documents intent at the call site (e.g. "cron::check_expired_holds"). Drivers like qail-pg may log it via tracing.

pub fn for_webhook(_source: &str) -> Self

Issue a token for an inbound webhook or gateway trigger.

Use for Meta WhatsApp callbacks, Xendit payment callbacks, and gateway event triggers that are authenticated via shared secret (X-Trigger-Secret) rather than JWT.

pub fn for_auth(_operation: &str) -> Self

Issue a token for an authentication operation.

Use for login, register, token refresh, and admin-claims resolution — operations that necessarily run before (or outside) a tenant scope is known.

Trait Implementations

impl Clone for SuperAdminToken

fn clone(&self) -> SuperAdminToken

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SuperAdminToken

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for SuperAdminToken

impl PartialEq for SuperAdminToken

fn eq(&self, other: &SuperAdminToken) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for SuperAdminToken