Struct AuthContext 

pub struct AuthContext {
    pub subject: String,
    pub email: Option<String>,
    pub issuer: String,
    pub audience: Option<String>,
    pub expires_at: Option<DateTime<Utc>>,
    pub auth_type: AuthType,
    pub is_admin: bool,
    pub allow_delegation: bool,
}

Authentication context containing user identity and metadata

Fields

subject: String

Unique subject identifier (e.g., user ID, service account ID)

email: Option<String>

Email address (if available)

issuer: String

Issuer (for OIDC) or “api_key” for API key auth

audience: Option<String>

Audience that was matched during token validation

• For OIDC access tokens: API audience (e.g., “https://api.example.com”)
• For OIDC ID tokens: client ID
• For API key auth: None

expires_at: Option<DateTime<Utc>>

Token expiration time (if applicable)

auth_type: AuthType

Authentication type

is_admin: bool

Whether this user has admin privileges

allow_delegation: bool

Whether this authentication allows user delegation (acting on behalf of others)

• OIDC user tokens: false (user cannot impersonate others)
• API keys/service accounts: true (can act on behalf of users)

Trait Implementations

impl Clone for AuthContext

fn clone(&self) -> AuthContext

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuthContext

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.