Struct VerifiedDelegation

pub struct VerifiedDelegation { /* private fields */ }

A successfully verified delegation token.

Implementations

impl VerifiedDelegation

pub fn claims(&self) -> &DelegationClaims

Read claims only after successful cryptographic and standard-claim verification. The returned reference prevents callers from widening scopes after verification.

pub fn key_id(&self) -> &str

pub fn algorithm(&self) -> Algorithm

pub fn allows( &self, subject: &str, action: &str, resource: &str, request_facts: &Value, ) -> bool

Check whether this verified grant covers one concrete request.

subject must be the trusted identity of the acting agent, not a value copied from an untrusted request. request_facts is the JSON object against which optional constraints are evaluated. Missing action/resource scopes and missing constraint paths fail closed. This check does not establish that the issuer had authority to mint the grant, nor does it provide revocation; callers must enforce those properties separately.

Trait Implementations

impl Clone for VerifiedDelegation

fn clone(&self) -> VerifiedDelegation

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for VerifiedDelegation

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.