Struct DecisionRecord 

pub struct DecisionRecord {

    pub request_uri: String,
    pub account: String,
    pub client_origin: String,
    pub client_key: ClientKey,
    pub first_time: bool,
    pub client_self: ClientSelf,
    pub requested: ScopeSet,
    pub verdict: Verdict,
    pub token: Option<ConsentReference>,
    pub created_at: OffsetDateTime,
    pub expires_at: OffsetDateTime,
    pub state: DecisionState,
    pub sequence: u64,
}

One authorization request, as this server decided about it.

Fields

request_uri: String

The pushed request this decides. The record’s identity.

account: String

The account the request named, resolved at PAR. Only this account may see, approve or decline the record.

client_origin: String

Where the client served its metadata document from — scheme, host and port of client_id, which is the only part of it that is a fact about the world.

client_key: ClientKey

The content key of that document; see crate::oauth::client_metadata::ClientKey.

first_time: bool

Whether this account has not approved a request from this client key since this server started. Held in memory only, and forgotten wholesale once this server has recorded more approvals than it keeps track of — which makes every client look new again, the direction that fails safe.

Always true for a client at the local origin (didbot_pds::policy::is_local_origin). Any process on that client’s machine can send the same client_id, so an earlier approval says nothing about who sent this one.

client_self: ClientSelf

The client’s own copy of its name, home page and logo. Logged, never serialized; see ClientSelf.

requested: ScopeSet

The scope the client asked for.

verdict: Verdict

What this server decided.

token: Option<ConsentReference>

The one-time reference the named account approves or declines with.

The same ConsentReference plan/oauth.md’s consent seam already mints, reused rather than joined by a second credential. Absent when the verdict is Verdict::Deny: there is nothing to approve, so nothing is minted that could approve it.

created_at: OffsetDateTime

When this record was minted.

expires_at: OffsetDateTime

When it stops being answerable — the pushed request’s own expiry, which is always sooner than the consent reference’s, so this is the deadline that binds.

state: DecisionState

Where it is in its life; see DecisionState.

sequence: u64

Where it sits in this store’s arrival order, for the long poll’s cursor. Assigned by DecisionStore::put.

Implementations

impl DecisionRecord

pub fn granted(&self) -> ScopeSet

What the ceiling granted of the request when this record was minted.

pub fn is_live(&self, now: OffsetDateTime) -> bool

Whether this record is still answerable at now.

pub fn to_json(&self) -> Value

The record as the daemon and the consent page read it.

ClientSelf is not in here, and must not be: see this module’s doc and plan/app-allowlist.md.

Trait Implementations

impl Clone for DecisionRecord

fn clone(&self) -> DecisionRecord

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for DecisionRecord

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.