Struct AuthenticatedUser 

pub struct AuthenticatedUser {
    pub sub: String,
    pub email: Option<String>,
    pub roles: Vec<String>,
    pub claims: Value,
}

Represents an authenticated user extracted from a validated JWT token.

Fields

sub: String

Subject claim (“sub”) - unique user identifier.

email: Option<String>

Email claim (“email”), if present in the token.

roles: Vec<String>

Roles extracted from the token claims.

claims: Value

Raw claims for advanced access.

Implementations

impl AuthenticatedUser

pub fn has_role(&self, role: &str) -> bool

Check whether the user has a specific role.

pub fn has_any_role(&self, roles: &[&str]) -> bool

Check whether the user has any of the specified roles.

Trait Implementations

impl Clone for AuthenticatedUser

fn clone(&self) -> AuthenticatedUser

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuthenticatedUser

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for AuthenticatedUser

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl<S> FromRequestParts<S> for AuthenticatedUser

where S: Send + Sync, Arc<JwtValidator>: FromRef<S>,

Axum extractor implementation for AuthenticatedUser.

This extracts the JWT from the Authorization: Bearer <token> header, validates it using the JwtValidator from the application state, and returns an AuthenticatedUser on success.

The application state must implement FromRef<S> for Arc<JwtValidator>.

For custom identity types, use extract_jwt_identity to implement FromRequestParts with minimal boilerplate.

Example

async fn protected_handler(user: AuthenticatedUser) -> impl IntoResponse {
    format!("Hello, {}!", user.sub)
}

type Rejection = AppError

If the extractor fails it’ll use this “rejection” type. A rejection is a kind of error that can be converted into a response.

async fn from_request_parts( parts: &mut Parts, state: &S, ) -> Result<Self, Self::Rejection>

Perform the extraction.

impl Identity for AuthenticatedUser

fn sub(&self) -> &str

Unique subject identifier (e.g. JWT “sub” claim).

fn roles(&self) -> &[String]

Roles associated with this identity.

impl Serialize for AuthenticatedUser

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.