Struct SsoIdentity 

pub struct SsoIdentity {
    pub issuer: String,
    pub tenant: String,
    pub subject: String,
}

Normalized identity extracted from a (verified) OIDC token.

Fields

issuer: String

The OIDC iss (issuer URL).

tenant: String

The organization tenant, normalized across providers (Google hd, Azure tid, Keycloak realm, …). This is what an org_did binds to.

subject: String

The OIDC sub. Raw — the org-scoped pseudonym derivation (blake2b(sub‖org_did‖…), RFC-001 §B.1) happens downstream; the raw subject must not cross the wire layer.

Trait Implementations

impl Clone for SsoIdentity

fn clone(&self) -> SsoIdentity

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SsoIdentity

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for SsoIdentity

impl PartialEq for SsoIdentity

fn eq(&self, other: &SsoIdentity) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for SsoIdentity