Struct TokenRecord 

pub struct TokenRecord {
    pub id: String,
    pub capabilities: CapabilitySet,
    pub label: String,
    pub created_at: SystemTime,
}

A registered token: the capabilities it grants plus provenance metadata.

The store maps an opaque bearer-token string to one of these records (spec §9). The token string itself stays the wire credential (Authorization: Bearer <token>); the record is the server-side authority on what that token may do.

Fields

id: String

Identifier for the audit trail.

Assigned at registration and unrelated to the token’s value, so a trail can name the caller without containing the credential. Per-process: tokens are not persisted, so neither is this.

capabilities: CapabilitySet

Capabilities this token grants (spec §2 mechanism).

label: String

Human-readable label for provenance (e.g. "legacy", "operator").

created_at: SystemTime

When the token was registered.

Implementations

impl TokenRecord

pub fn new(capabilities: CapabilitySet, label: impl Into<String>) -> Self

Create a token record with the given capabilities and label.

pub fn full_control(label: impl Into<String>) -> Self

Create a full-control (wildcard) token — the legacy-key mapping target and the full-control preset (spec §4, §6).

Trait Implementations

impl Clone for TokenRecord

fn clone(&self) -> TokenRecord

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for TokenRecord

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.