Struct SecurityContext 

pub struct SecurityContext {
    pub user_id: Option<String>,
    pub tenant_id: Option<TenantId>,
    pub roles: HashSet<Role>,
    pub permissions: PermissionSet,
    pub claims: Option<TokenClaims>,
    pub is_system: bool,
}

Security context for an authenticated request

Fields

user_id: Option<String>

Authenticated user ID

tenant_id: Option<TenantId>

Tenant ID

roles: HashSet<Role>

Roles assigned to the user

permissions: PermissionSet

Permissions derived from roles

claims: Option<TokenClaims>

Token claims (if JWT auth)

is_system: bool

Whether this is a system/service context

Implementations

impl SecurityContext

pub fn anonymous() -> Self

Create an anonymous context

pub fn system() -> Self

Create a system context with full permissions

pub fn user(user_id: impl Into<String>, tenant_id: Option<TenantId>) -> Self

Create a user context

pub fn with_role(self, role: Role) -> Self

Add a role

pub fn with_roles(self, roles: impl IntoIterator<Item = Role>) -> Self

Add multiple roles

pub fn with_claims(self, claims: TokenClaims) -> Self

Set claims

pub fn is_authenticated(&self) -> bool

Check if user is authenticated

pub fn has_permission(&self, permission: Permission) -> bool

Check if user has a permission

pub fn has_role(&self, role: &Role) -> bool

Check if user has a role

pub fn require_permission( &self, permission: Permission, ) -> Result<(), SecurityError>

Require a permission, returning error if not granted

pub fn require_authenticated(&self) -> Result<(), SecurityError>

Require authentication

pub fn can_access_tenant(&self, tenant_id: &TenantId) -> bool

Check if context can access a specific tenant

Trait Implementations

impl Clone for SecurityContext

fn clone(&self) -> SecurityContext

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SecurityContext

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SecurityContext

fn default() -> Self

Returns the “default value” for a type.