Struct ExchangeParams 

pub struct ExchangeParams<'a> {
    pub subject: &'a NhiClaims,
    pub subject_chain: &'a [RevocationIdentity],
    pub subject_delegation_depth: usize,
    pub target_audience: &'a str,
    pub requested_scopes: Option<&'a str>,
    pub azp: &'a str,
    pub now_s: u64,
    pub ttl_s: u64,
    pub issuer: &'a str,
    pub max_depth: usize,
    pub allowed_audiences: &'a [String],
}

Parameters for building exchanged claims.

Fields

subject: &'a NhiClaims

Claims from the validated inbound subject token.

subject_chain: &'a [RevocationIdentity]

Verified identities returned by IdentityValidator, leaf first.

subject_delegation_depth: usize

Combined parent-token and actor depth returned by the validator.

target_audience: &'a str

Target backend audience for the exchanged token.

requested_scopes: Option<&'a str>

Space-separated requested scopes (None inherits the subject’s scopes).

azp: &'a str

Authorized party identifier (the client requesting the exchange).

now_s: u64

Current time in seconds since epoch.

ttl_s: u64

TTL in seconds for the exchanged token.

issuer: &'a str

Issuer URI for the gateway itself (not the upstream IdP).

max_depth: usize

Maximum allowed delegation depth. The resulting act chain must not exceed this depth.

allowed_audiences: &'a [String]

Backend names that are valid exchange targets. When non-empty, the target audience must appear in this list.