Enum Audience 

pub enum Audience {
    Single(String),
    Multi(Vec<String>),
}

The aud claim per RFC 7519 §4.1.3: “a StringOrURI value or an array of StringOrURI”. Mainstream IdPs (Okta, Auth0, Azure AD, Cognito) emit the array form for multi-audience apps ("aud": ["agentvisor", "some-other-svc"]). Accepting only the string form silently locks the operator out at go-live with an invalid type: sequence, expected string error deep inside jsonwebtoken::decode, before our validator’s aud check runs.

Round-12 F10 defense-in-depth: reject "aud": [] at deserialize time. Without this guard Multi(vec![]) would still be caught by jsonwebtoken’s set_audience intersection check, but a future refactor that removed the library gate would leave the empty-list shape silently accepting any token. Refusing at the concrete deserialize step means the audience gate remains sound at both layers.

Variants

Single(String)

Single-string form ("aud": "agentvisor").

Multi(Vec<String>)

Array form ("aud": ["agentvisor", "other"]).

Implementations

impl Audience

pub fn contains(&self, expected: &str) -> bool

True when expected appears in this audience claim (either the single string equals it, or the array contains it).

pub fn primary(&self) -> &str

A borrowed view suitable for logging/display. Returns the first entry of a multi-audience — the “primary” audience by convention.

Trait Implementations

impl Clone for Audience

fn clone(&self) -> Audience

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Audience

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for Audience

fn deserialize<D: Deserializer<'de>>(deserializer: D) -> Result<Self, D::Error>

Deserialize this value from the given Serde deserializer.

impl From<&str> for Audience

fn from(s: &str) -> Self

Converts to this type from the input type.

impl From<String> for Audience

fn from(s: String) -> Self

Converts to this type from the input type.

impl PartialEq for Audience

fn eq(&self, other: &Audience) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for Audience

fn serialize<S: Serializer>(&self, serializer: S) -> Result<S::Ok, S::Error>

Serialize this value into the given Serde serializer.

impl Eq for Audience

impl StructuralPartialEq for Audience