Enum AuthIdentity 

pub enum AuthIdentity {
    Basic {
        username: String,
    },
    Jwt {
        username: String,
        claims: Value,
    },
    OAuth {
        email: Option<String>,
        provider: String,
        claims: Value,
    },
    Mtls {
        username: String,
        cn: String,
        sans: Vec<String>,
    },
}

Authentication identity — the result of successful authentication.

Represents WHO the user is (authentication), not what they can do (authorization). Mapped to a User with Role per-application during authorization.

Variants

Basic

Basic auth user (username verified via password)

Fields

username: String

Username from Basic auth header

Jwt

JWT auth user (username from validated token)

Fields

username: String

Username (sub claim)

claims: Value

Full JWT claims for additional context

OAuth

OAuth user (identity from external provider)

Fields

email: Option<String>

Email address (if provided by provider)

provider: String

OAuth provider name (github, google, azure, etc.)

claims: Value

Full OAuth claims/user info

Mtls

mTLS user (identity from client certificate)

Fields

username: String

Username (mapped from CN, SAN, or config)

cn: String

Certificate Common Name

sans: Vec<String>

Subject Alternative Names

Implementations

impl AuthIdentity

pub fn username(&self) -> Cow<'_, str>

Get the username/identifier for this identity.

Returns a borrowed &str for most variants. The OAuth fallback (no email) allocates a formatted string, so the return type is Cow<str> to avoid cloning in the common case.

pub const fn method(&self) -> &'static str

Get the auth method name.

Trait Implementations

impl Clone for AuthIdentity

fn clone(&self) -> AuthIdentity

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuthIdentity

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for AuthIdentity

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for AuthIdentity

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.