Enum TenantScope 

pub enum TenantScope {
    All,
    Set(HashSet<TenantId>),
}

Tenant scope attached to a single bearer token.

Variants

All

Wildcard — the token grants access to every tenant. Produced by token:tenant=* and by the legacy bare-token shape (with deprecation warning).

Set(HashSet<TenantId>)

Explicit allowlist — the token grants access only to the listed tenant ids.

Implementations

impl TenantScope

pub fn allows(&self, tenant: TenantId) -> bool

true if tenant is covered by this scope.

pub fn is_all(&self) -> bool

true if this scope is the wildcard form. Used by callers (and integration tests) that want to assert legacy semantics held.

Trait Implementations

impl Clone for TenantScope

fn clone(&self) -> TenantScope

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for TenantScope

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for TenantScope

impl PartialEq for TenantScope

fn eq(&self, other: &TenantScope) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for TenantScope