Struct AuthenticatedPrincipal 

pub struct AuthenticatedPrincipal {
    pub subject: String,
    pub tenant: Option<String>,
    pub scopes: Vec<String>,
    pub issuer: Option<String>,
    pub expires_at: Option<DateTime<Utc>>,
    pub method: AuthenticationMethod,
    pub assurance: IdentityAssurance,
}

Transport-neutral result of successful authentication.

This type lives in rvoip-core-traits so auth implementations and protocol adapters can carry the same complete identity without creating a dependency cycle. Resource authorization should compare Self::ownership_key, not subject by itself.

Fields

subject: String

tenant: Option<String>

scopes: Vec<String>

issuer: Option<String>

expires_at: Option<DateTime<Utc>>

method: AuthenticationMethod

assurance: IdentityAssurance

Implementations

impl AuthenticatedPrincipal

pub fn anonymous() -> AuthenticatedPrincipal

pub fn has_scope(&self, scope: &str) -> bool

pub fn require_scope(&self, scope: &str) -> Result<(), BearerAuthError>

pub fn ownership_key(&self) -> PrincipalOwnershipKey

pub fn has_same_owner(&self, other: &AuthenticatedPrincipal) -> bool

pub fn is_expired_at(&self, now: DateTime<Utc>) -> bool

Whether this principal is expired at now.

An expiry equal to now is already expired. Principals without an expiry remain active until their backing authentication policy says otherwise.

pub fn is_expired(&self) -> bool

pub fn from_assurance(assurance: IdentityAssurance) -> AuthenticatedPrincipal

Compatibility mapping for authentication providers that currently produce only an IdentityAssurance. Validators with issuer, tenant, or credential-expiry information should construct a full principal.

pub fn from_assurance_with_method( assurance: IdentityAssurance, method: AuthenticationMethod, ) -> AuthenticatedPrincipal

Trait Implementations

impl Clone for AuthenticatedPrincipal

fn clone(&self) -> AuthenticatedPrincipal

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuthenticatedPrincipal

fn fmt(&self, formatter: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.