Struct AuthService 

pub struct AuthService { /* private fields */ }

Authentication service managing users and sessions.

Implementations

impl AuthService

pub fn new() -> Self

Create a new authentication service.

Uses environment variables as a fallback for admin credentials.

pub fn with_data_dir(data_dir: Option<PathBuf>) -> Self

Create an authentication service with optional persistence to disk. Admin credentials are read from environment variables only.

pub fn with_data_dir_and_secrets( data_dir: Option<PathBuf>, secrets: Option<&dyn SecretsProvider>, ) -> Self

Create an authentication service with persistence and a secrets provider. Admin credentials are resolved through the secrets provider chain (vault → external vault → env vars) instead of raw environment variables.

pub fn login(&self, username: &str, password: &str) -> AuthResponse

Authenticate user with username and password.

pub fn verify_mfa(&self, code: &str, temp_token: &str) -> AuthResponse

Verify MFA code and complete authentication.

pub fn validate_session(&self, token: &str) -> Option<UserInfo>

Validate a session token and return user info.

pub fn logout(&self, token: &str) -> bool

Logout and invalidate session.

pub fn get_user(&self, user_id: &str) -> Option<UserInfo>

Get user by ID.

pub fn list_users(&self) -> Vec<UserInfo>

List all users.

pub fn create_user( &self, username: &str, email: &str, password: &str, role: &str, ) -> Result<UserInfo, String>

Create a new user.

pub fn update_user( &self, username: &str, email: Option<String>, role: Option<String>, password: Option<String>, ) -> Result<UserInfo, String>

Update an existing user.

pub fn delete_user(&self, username: &str) -> Result<(), String>

Delete a user.

pub fn enable_mfa(&self, username: &str) -> Result<String, String>

Enable MFA for a user and return the generated secret. The secret should be stored by the user in their authenticator app.

pub fn disable_mfa(&self, username: &str) -> Result<(), String>

Disable MFA for a user.

pub fn cleanup_expired(&self)

Clean up expired sessions.

Trait Implementations

impl Default for AuthService

fn default() -> Self

Returns the “default value” for a type.