Struct JwtClaimsEngine 

pub struct JwtClaimsEngine { /* private fields */ }

Policy engine backed by verified JWT permission claims.

This is intended as the fast first layer in a composed engine: allow obvious org-wide permissions from the token and delegate resource-specific decisions to RBAC, ODRL, WorkOS FGA, or another precise engine.

Implementations

impl JwtClaimsEngine

pub fn new(subject: VerifiedSubject) -> Self

Build an engine from a verified subject.

pub fn from_permissions( subject: impl Into<String>, permissions: impl IntoIterator<Item = String>, ) -> Self

Build an engine from raw permission strings.

Trait Implementations

impl PolicyEngine for JwtClaimsEngine

fn check(&self, subject: &str, action: &str, resource: &str) -> PolicyResult

Evaluate whether subject may perform action on resource.

fn with_fallback(self, fallback: Arc<dyn PolicyEngine>) -> FallbackEngine<Self>

where Self: Sized,

Compose this engine with a fallback.