Struct AuthScope 

pub struct AuthScope {
    pub allowed_namespaces: Vec<String>,
    pub tenant_id: Option<String>,
    pub project_id: Option<String>,
    pub expires_at: Option<u64>,
    pub capabilities: AuthCapabilities,
    pub acl_tags: Vec<String>,
}

Authorization scope - ALWAYS conjoined with user filters

This is the security boundary that cannot be bypassed. It encodes:

• Allowed namespaces/tenants
• Optional project scope
• Token expiry
• Capability flags

Fields

allowed_namespaces: Vec<String>

Allowed namespaces (non-empty; at least one required)

tenant_id: Option<String>

Optional tenant ID (for multi-tenant deployments)

project_id: Option<String>

Optional project scope

expires_at: Option<u64>

Token expiry timestamp (Unix epoch seconds)

capabilities: AuthCapabilities

Capability flags

acl_tags: Vec<String>

Optional ACL tags the caller has access to

Implementations

impl AuthScope

pub fn for_namespace(namespace: impl Into<String>) -> Self

Create a new auth scope for a single namespace

pub fn full_access(namespace: impl Into<String>) -> Self

Create with full access to a namespace

pub fn with_namespace(self, namespace: impl Into<String>) -> Self

Add a namespace to the allowed list

pub fn with_tenant(self, tenant_id: impl Into<String>) -> Self

Set tenant ID

pub fn with_project(self, project_id: impl Into<String>) -> Self

Set project ID

pub fn with_expiry(self, expires_at: u64) -> Self

Set expiry

pub fn with_acl_tags(self, tags: Vec<String>) -> Self

Add ACL tags

pub fn is_expired(&self) -> bool

Check if this scope is expired

pub fn is_namespace_allowed(&self, namespace: &str) -> bool

Check if a namespace is allowed

pub fn to_filter_ir(&self) -> FilterIR

Convert auth scope to filter IR clauses

This generates the mandatory predicates that MUST be conjoined with any user filter.

Trait Implementations

impl Clone for AuthScope

fn clone(&self) -> AuthScope

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuthScope

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for AuthScope

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for AuthScope

fn eq(&self, other: &AuthScope) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for AuthScope

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for AuthScope