Struct OidcClaims 

pub struct OidcClaims {
    pub subject: String,
    pub issuer: String,
    pub audience: Vec<String>,
    pub expires_at: i64,
    pub issued_at: i64,
    pub email: Option<String>,
    pub github: Option<GithubClaims>,
    pub raw: HashMap<String, Value>,
}

Claims extracted from a verified OIDC token. The fields are the minimum the Fulcio-style CA needs to bind to the joint ephemeral threshold key.

Fields

subject: String

Subject — stable identifier for the signer at the issuer.

issuer: String

Issuer URL.

audience: Vec<String>

Audience — who the token was issued for.

expires_at: i64

Expiry (Unix epoch seconds).

issued_at: i64

Issued-at (Unix epoch seconds).

email: Option<String>

Email claim, if present (Google, Okta, Azure AD).

github: Option<GithubClaims>

GitHub-specific claims: repository, workflow, ref, etc.

raw: HashMap<String, Value>

All raw claims, for callers that need fields not exposed above.

Trait Implementations

impl Clone for OidcClaims

fn clone(&self) -> OidcClaims

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for OidcClaims

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for OidcClaims

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for OidcClaims

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.