Struct AuthSubject 

pub struct AuthSubject {
    pub name: String,
    pub groups: Vec<String>,
    pub claims: HashMap<String, String>,
    pub fingerprint: Option<String>,
}

Auth subject — passed to subsequent ACL checks (§7.3) after a successful AuthMode::validate.

Fields

name: String

Stable Identity (e.g. JWT sub, Bearer-Mapping, mTLS-CN, SASL-User).

groups: Vec<String>

Group memberships (e.g. JWT groups claim).

claims: HashMap<String, String>

Free-form claims (any string value).

fingerprint: Option<String>

mTLS: mtls:<SHA-256 of the client certificate, hex>. An ACL entry may name it instead of the subject DN in Self::name, to pin one certificate.

Implementations

impl AuthSubject

pub fn anonymous() -> AuthSubject

Anonymous subject for AuthMode::None.

pub fn new(name: impl Into<String>) -> AuthSubject

Plain constructor.

pub fn with_group(self, g: impl Into<String>) -> AuthSubject

Fluent add group.

pub fn with_claim( self, k: impl Into<String>, v: impl Into<String>, ) -> AuthSubject

Fluent add claim.

Trait Implementations

impl Clone for AuthSubject

fn clone(&self) -> AuthSubject

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuthSubject

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Default for AuthSubject

fn default() -> AuthSubject

Returns the “default value” for a type.

impl Eq for AuthSubject

impl PartialEq for AuthSubject

fn eq(&self, other: &AuthSubject) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for AuthSubject