SboxSuperuser/Api/ActorIdentity.cs
Defines ActorIdentity, an immutable host-issued principal with a Kind and SubjectId. The constructor validates the enum and enforces different validation rules per ActorKind: Steam ID validation for Player, literal "dedicated-console" for DedicatedConsole, and a key validation for InternalService.
Credential Access
using SboxSuperuser.Core.Contracts;
using SboxSuperuser.Core.Identity;
namespace SboxSuperuser;
/// <summary>A host-issued principal description, never a client-supplied authorization credential.</summary>
public sealed class ActorIdentity
{
/// <summary>Gets the verified principal category.</summary>
public ActorKind Kind { get; }
/// <summary>Gets the decimal Steam ID, local console ID, or stable service key.</summary>
public string SubjectId { get; }
internal ActorIdentity( ActorKind kind, string subjectId )
{
Kind = ContractGuard.EnumValue( kind, nameof( kind ) );
SubjectId = kind switch
{
ActorKind.Player => SteamIdentity.Validate( subjectId, nameof( subjectId ) ),
ActorKind.DedicatedConsole when subjectId == "dedicated-console" => subjectId,
ActorKind.InternalService => ContractGuard.Key( subjectId, nameof( subjectId ) ),
_ => throw new ArgumentException( "An explicit authenticated principal is required.", nameof( kind ) )
};
}
}