Struct CertIdentity 

pub struct CertIdentity {
    pub username: String,
    pub role: Role,
    pub subject_dn: String,
    pub serial_hex: String,
    pub not_after_unix_secs: i64,
}

Parsed identity extracted from a validated client certificate.

The auth store consumes this to either look up a matching persisted user or treat it as an ephemeral identity (no entry in the user table, role is cert-derived).

Fields

username: String

role: Role

subject_dn: String

Subject DN — preserved for audit logging even when we don’t map it back to a persisted user.

serial_hex: String

Certificate serial number in uppercase hex — audit identifier.

not_after_unix_secs: i64

Unix-seconds expiry of the certificate. Auth middleware rejects requests once this passes even if the cert is still in cache.

Trait Implementations

impl Clone for CertIdentity

fn clone(&self) -> CertIdentity

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CertIdentity

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl PartialEq for CertIdentity

fn eq(&self, other: &CertIdentity) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Eq for CertIdentity

impl StructuralPartialEq for CertIdentity