Struct AuthenticatedPrincipal 

pub struct AuthenticatedPrincipal {
    pub subject: String,
    pub tenant_claim: Option<TenantId>,
    pub scopes: Vec<String>,
    pub claims: Value,
}

Result of a successful auth check, attached to the request as an axum::Extension. The TenantExtractor in http.rs reads this to resolve the request’s target tenant ahead of the X-Solo-Tenant header. P4 (audit log) reads principal.subject for the audit-log “who” field.

Fields

subject: String

JWT sub claim, or "bearer" for bearer-mode requests.

tenant_claim: Option<TenantId>

Tenant claimed by the JWT (tenant_claim_name), if any. In bearer mode this is set to the daemon’s default tenant. In OIDC mode it’s the validated value of the configured custom claim.

scopes: Vec<String>

Scopes advertised by the JWT (scope claim, space-split). Empty for bearer-mode principals.

claims: Value

Raw JWT claims (serde_json::Value) for downstream inspection. Null for bearer-mode principals.

Implementations

impl AuthenticatedPrincipal

pub fn bearer(default_tenant: TenantId) -> Self

For bearer mode: synthesize a principal with the daemon’s default tenant. No JWT, no claims, no scopes.

Trait Implementations

impl Clone for AuthenticatedPrincipal

fn clone(&self) -> AuthenticatedPrincipal

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuthenticatedPrincipal

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.