Struct AuthContextBuilder 

pub struct AuthContextBuilder { /* private fields */ }

Builder for constructing AuthContext

Provides a fluent API for building auth contexts with validation.

Example

use turbomcp_auth::context::AuthContext;

let ctx = AuthContext::builder()
    .subject("user123")
    .user(user_info)
    .roles(vec!["admin".into()])
    .permissions(vec!["read:posts".into()])
    .provider("oauth2:google")
    .build();

Implementations

impl AuthContextBuilder

pub fn subject(self, sub: impl Into<String>) -> Self

Set subject (user ID)

pub fn sub(self, sub: impl Into<String>) -> Self

👎Deprecated since 2.0.5: Use .subject() instead to avoid confusion with std::ops::Sub trait

Set subject (user ID) - deprecated alias

pub fn iss(self, iss: impl Into<String>) -> Self

Set issuer

pub fn aud(self, aud: impl Into<String>) -> Self

Set audience

pub fn exp(self, exp: u64) -> Self

Set expiration (Unix timestamp)

pub fn iat(self, iat: u64) -> Self

Set issued at (Unix timestamp)

pub fn nbf(self, nbf: u64) -> Self

Set not before (Unix timestamp)

pub fn jti(self, jti: impl Into<String>) -> Self

Set JWT ID

pub fn user(self, user: UserInfo) -> Self

Set user information

pub fn roles(self, roles: Vec<String>) -> Self

Set roles

pub fn role(self, role: impl Into<String>) -> Self

Add a single role

pub fn permissions(self, permissions: Vec<String>) -> Self

Set permissions

pub fn permission(self, permission: impl Into<String>) -> Self

Add a single permission

pub fn scopes(self, scopes: Vec<String>) -> Self

Set scopes

pub fn scope(self, scope: impl Into<String>) -> Self

Add a single scope

pub fn request_id(self, request_id: impl Into<String>) -> Self

Set request ID for nonce/replay protection

This is used for request-level binding (DPoP nonces, one-time request tokens), NOT for session management. MCP requires stateless authentication where each request includes valid credentials.

pub fn authenticated_at(self, authenticated_at: SystemTime) -> Self

Set authenticated at timestamp

pub fn expires_at(self, expires_at: SystemTime) -> Self

Set expires at timestamp

pub fn token(self, token: TokenInfo) -> Self

Set token information

pub fn provider(self, provider: impl Into<String>) -> Self

Set auth provider

pub fn dpop_jkt(self, jkt: impl Into<String>) -> Self

Set DPoP JWK thumbprint (requires dpop feature)

pub fn metadata(self, key: impl Into<String>, value: Value) -> Self

Add custom metadata

pub fn build(self) -> Result<AuthContext, AuthError>

Build the AuthContext

Errors

Returns error if required fields are missing:

• sub (subject)
• user (user information)
• provider (auth provider)

Trait Implementations

impl Default for AuthContextBuilder

fn default() -> AuthContextBuilder

Returns the “default value” for a type.