Struct MtlsConsumerMapping 

pub struct MtlsConsumerMapping {
    pub enabled: bool,
    pub consumers: Vec<MtlsFingerprintMapping>,
    pub subject_cn_mapping: BTreeMap<String, String>,
}

mTLS client-certificate consumer mapping (DW-035, gateway.mtls_consumer_mapping).

Maps a VERIFIED client certificate to a consumer name by its SHA-256 fingerprint (lowercase colon-separated hex of the DER) or by subject CommonName. When enabled and a client presents a certificate that chains to a listener’s client_ca_file but matches NO entry in this table, the gateway returns 401 mtls_consumer_not_mapped (the certificate was verified but is not a known caller). A client that presents NO certificate on a listener with this mapping enabled falls through to the other authentication families (or 401 if the route requires auth and no family resolves).

Fields

enabled: bool

Master switch. Default false: the mapping is inert and mTLS certificates are matched only through consumers’ mtls credentials (the DW-019 path).

consumers: Vec<MtlsFingerprintMapping>

Fingerprint-to-consumer entries. Each fingerprint is the SHA-256 of the client certificate DER as lowercase colon-separated hex (e.g. ab:cd:ef:...). The fingerprint is the EXACT bytes the gateway computes from the presented certificate, so a re-issued certificate needs a new entry.

subject_cn_mapping: BTreeMap<String, String>

Subject-CN-to-consumer mapping (alternative to consumers): maps the certificate’s subject CommonName to a consumer name. Binding by subject CN survives certificate re-issue under the same CN; the certificate must still chain to a listener’s client_ca_file. Keys are exact, case-sensitive CN strings.

Trait Implementations

impl Clone for MtlsConsumerMapping

fn clone(&self) -> MtlsConsumerMapping

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for MtlsConsumerMapping

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for MtlsConsumerMapping

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl JsonSchema for MtlsConsumerMapping

fn schema_name() -> Cow<'static, str>

The name of the generated JSON Schema.

fn schema_id() -> Cow<'static, str>

Returns a string that uniquely identifies the schema produced by this type.

fn json_schema(generator: &mut SchemaGenerator) -> Schema

Generates a JSON Schema for this type.

fn inline_schema() -> bool

Whether JSON Schemas generated for this type should be included directly in parent schemas, rather than being re-used where possible using the $ref keyword.

impl PartialEq for MtlsConsumerMapping

fn eq(&self, other: &MtlsConsumerMapping) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for MtlsConsumerMapping

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for MtlsConsumerMapping