Enum AuthContext 

pub enum AuthContext {
    Platform(PlatformPrincipal),
    Tenant(Box<Principal>),
}

The authenticated identity behind a request, in exactly one control plane.

One authentication pipeline produces this, whichever entry path the caller used — a machine credential exchanged for a token, or a human federated login. Everything downstream authorizes against it and never branches on how authentication happened.

The two variants are closed and carry different payloads, so a platform identity is not representable where a tenant identity is required and the reverse. That mirrors the database tier’s OperatorPool / TenantConn split at the identity tier.

Variants

Platform(PlatformPrincipal)

Platform control plane: tenant lifecycle and administrative recovery.

Tenant(Box<Principal>)

Tenant control plane: the resources of exactly one tenant.

Implementations

impl AuthContext

pub fn platform(&self) -> Option<&PlatformPrincipal>

Borrow the platform principal, when this context is platform-scoped.

pub fn tenant(&self) -> Option<&Principal>

Borrow the tenant principal, when this context is tenant-scoped.

pub fn principal_id(&self) -> PrincipalId

The authenticated principal id, whichever plane this context names.

Audit uses this so every privileged operation is attributable to a principal rather than to a credential.

pub fn principal_kind(&self) -> PrincipalKindTag

The kind of principal behind the request, whichever plane it names.

Audit records this, so it has to be what the store holds rather than a per-plane constant: a platform plane carrying both machine roots and registered humans would otherwise attribute every human decision to a machine.

pub const fn credential_id(&self) -> Option<Uuid>

The credential the request authenticated with, on either plane.

Audit records it beside the principal, because a principal may hold several live credentials at once and the recorded decision has to say which one was used.

pub fn effective_permissions(&self) -> &PermissionSet

The permissions authorization is decided against.

One vocabulary and one checker serve both planes; only the set differs.

pub fn tenant_id(&self) -> Option<DataTenantId>

The tenant this context is scoped to, when it is tenant-scoped.

Returns None for a platform context because a platform principal has no tenant to return — not because one was withheld.

Trait Implementations

impl Clone for AuthContext

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuthContext

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for AuthContext

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for AuthContext

impl From<PlatformPrincipal> for AuthContext

fn from(principal: PlatformPrincipal) -> Self

Lift a verified platform principal into the shared context.

The platform arm is the one that carries no tenant, which is what downstream tenancy checks read the context for.

impl From<Principal> for AuthContext

fn from(principal: Principal) -> Self

Lift a verified tenant principal into the shared context.

Boxed because a tenant principal carries its roles and resolved permissions, and the platform variant carries far less; keeping the enum small matters where it is passed by value on every request.

impl PartialEq for AuthContext

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for AuthContext

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for AuthContext