Struct Principal 

pub struct Principal {
    pub username: String,
    pub account_id: String,
    pub scopes: Vec<String>,
}

Authenticated principal — attached to every authorized JMAP request by the auth middleware (crate::auth::JmapAuthLayer).

Method handlers receive &Principal and use it to enforce that the accountId named in each JMAP request belongs to the authenticated caller. See Principal::owns_account.

Fields

username: String

Username of the authenticated user (e.g. alice@example.com).

account_id: String

Canonical account identifier this principal owns.

JMAP requests carrying a different accountId are rejected with JmapErrorType::Forbidden.

scopes: Vec<String>

Granted scopes (e.g. capability URIs the principal is allowed to use). An empty set means “all scopes” — refine when scope-based authorization is wired in (see follow-ups in TODO.md).

Implementations

impl Principal

pub fn from_username(username: impl Into<String>) -> Self

Build a principal from a username, deriving the canonical account_id the same way the session endpoint does.

pub fn owns_account(&self, requested_account_id: &str) -> bool

True iff requested_account_id equals this principal’s owned account OR this principal has been granted the SCOPE_ADMIN scope.

Trait Implementations

impl Clone for Principal

fn clone(&self) -> Principal

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Principal

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for Principal

fn eq(&self, other: &Principal) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Eq for Principal

impl StructuralPartialEq for Principal