Struct PrincipalId 

pub struct PrincipalId(pub String);

Canonical, globally-unambiguous principal identifier. The durable ownership key for sessions, private memory, approvals, and audit attribution.

Composition is injective per identity class (see the constructors): an OIDC identity is keyed by validated issuer AND subject — never by subject alone and never by a config alias, so renaming an [oidc.<alias>] entry cannot re-key principals, and two issuers cannot collide on a shared sub. String equality across classes never links accounts.

Tuple Fields

0: String

Implementations

impl PrincipalId

pub const SHARED_OPERATOR: &'static str = "shared-operator"

Sentinel id for the single-operator / trusted-local path (no distinct identity source). Lets callers treat “trusted, but anonymous operator” as a real Principal instead of branching on Option.

pub fn shared_operator() -> Self

pub fn for_oidc(issuer: &str, subject: &str) -> Self

Canonical id for an OIDC human identity: validated issuer + sub.

pub fn for_service(issuer: &str, client_id: &str) -> Self

Canonical id for an OIDC service principal: validated issuer + the stable verified client identity (introspected client_id or an equivalent provider-defined client subject). Never a human-subject mapping.

pub fn for_roster(roster_principal_id: &str) -> Self

Canonical id for a local roster identity: the durable [users.<name>] principal id (NOT the display name — renaming a roster entry must preserve this id or migrate ownership atomically).

pub fn as_str(&self) -> &str

Trait Implementations

impl Clone for PrincipalId

fn clone(&self) -> PrincipalId

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for PrincipalId

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for PrincipalId

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for PrincipalId

impl From<&str> for PrincipalId

fn from(s: &str) -> Self

Converts to this type from the input type.

impl From<String> for PrincipalId

fn from(s: String) -> Self

Converts to this type from the input type.

impl Hash for PrincipalId

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl PartialEq for PrincipalId

fn eq(&self, other: &PrincipalId) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for PrincipalId

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for PrincipalId