Struct TokenRequestSpec

pub struct TokenRequestSpec {
    pub audiences: Vec<String>,
    pub bound_object_ref: Option<BoundObjectReference>,
    pub expiration_seconds: Option<i64>,
}

TokenRequestSpec contains client provided parameters of a token request.

Fields

audiences: Vec<String>

Audiences are the intendend audiences of the token. A recipient of a token must identify themself with an identifier in the list of audiences of the token, and otherwise should reject the token. A token issued for multiple audiences may be used to authenticate against any of the audiences listed but implies a high degree of trust between the target audiences.

bound_object_ref: Option<BoundObjectReference>

BoundObjectRef is a reference to an object that the token will be bound to. The token will only be valid for as long as the bound object exists. NOTE: The API server’s TokenReview endpoint will validate the BoundObjectRef, but other audiences may not. Keep ExpirationSeconds small if you want prompt revocation.

expiration_seconds: Option<i64>

ExpirationSeconds is the requested duration of validity of the request. The token issuer may return a token with a different validity duration so a client needs to check the ‘expiration’ field in a response.

Trait Implementations

impl Clone for TokenRequestSpec

fn clone(&self) -> TokenRequestSpec

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for TokenRequestSpec

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl DeepMerge for TokenRequestSpec

fn merge_from(&mut self, other: Self)

Merge other into self.

impl Default for TokenRequestSpec

fn default() -> TokenRequestSpec

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for TokenRequestSpec

fn deserialize<D>(deserializer: D) -> Result<Self, D::Error>

where D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for TokenRequestSpec

fn eq(&self, other: &TokenRequestSpec) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for TokenRequestSpec

fn serialize<S>(&self, serializer: S) -> Result<S::Ok, S::Error>

where S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for TokenRequestSpec