Struct TokenClaims 

pub struct TokenClaims {
    pub sub: Subject,
    pub sid: SessionId,
    pub session_version: SessionVersion,
    pub token_type: AuthTokenType,
    pub jti: Option<RefreshJti>,
    pub restriction: Restriction,
    pub iat: i64,
    pub exp: i64,
    pub nbf: Option<i64>,
    pub iss: String,
    pub aud: String,
}

Required local web-session claims. No product entities or permissions are embedded. Claims are signed, not encrypted, and must never carry secrets.

Fields

sub: Subject

Stable product subject.

sid: SessionId

Server-side session identity, shared by access and refresh credentials.

session_version: SessionVersion

Account-wide generation fence checked against current product state.

token_type: AuthTokenType

Credential purpose; verification always requires an expected purpose.

jti: Option<RefreshJti>

Single-use refresh identity. Access credentials must omit it.

restriction: Restriction

Explicit login restriction interpreted by product authorization.

iat: i64

Nonnegative Unix issuance timestamp in seconds.

exp: i64

Exclusive Unix expiry timestamp, strictly after issuance.

nbf: Option<i64>

Optional inclusive not-before time, strictly before expiry.

iss: String

Required product signing-domain issuer.

aud: String

Required local-session audience.

Trait Implementations

impl Clone for TokenClaims

fn clone(&self) -> TokenClaims

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for TokenClaims

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for TokenClaims

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for TokenClaims

fn eq(&self, other: &TokenClaims) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for TokenClaims

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl Eq for TokenClaims

impl StructuralPartialEq for TokenClaims