Struct XfccEntry 

pub struct XfccEntry {
    pub uri: Option<String>,
    pub hash: Option<String>,
    pub by: Option<String>,
    pub subject: Option<String>,
}

One decoded entry of an X-Forwarded-Client-Cert header. Envoy adds one per hop; the inner-most (leftmost) entry represents the original peer the bridge cares about. Field names match the upstream XFCC keys.

Fields

uri: Option<String>

SPIFFE / URI SAN (XFCC URI=).

hash: Option<String>

Hex-encoded fingerprint of the leaf cert (XFCC Hash=).

by: Option<String>

Issuer URI (XFCC By=). Often a SPIFFE id of the issuing CA.

subject: Option<String>

RFC 2253 leaf subject (XFCC Subject=). When Subject= is absent but DNS= is set, the parser folds the DNS list into this field as dns:<comma-separated> so downstream code has one fallback identity field to look at.

Trait Implementations

impl Clone for XfccEntry

fn clone(&self) -> XfccEntry

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for XfccEntry

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for XfccEntry

fn default() -> XfccEntry

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for XfccEntry

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for XfccEntry

impl PartialEq for XfccEntry

fn eq(&self, other: &XfccEntry) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for XfccEntry

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for XfccEntry