Function session 

pub fn session<'a>(
    actor: &str,
    claims: impl IntoIterator<Item = (&'a str, &'a str)>,
) -> Value

Session — who is asking, and what the identity provider said about them.

The claims are a Map[Str, Str] and not a record, because the set is the provider’s rather than the program’s: a tenant claim one deployment issues is one another has never heard of. They are copied in at the edge for the same reason the actor is — a fold that read them from a token would be a fold that could not replay (crate::render, §3.7).