agentd/auth/mod.rs
1// SPDX-License-Identifier: Apache-2.0
2//! Endpoint authentication — the interactive & workload credential providers and
3//! the durable token cache they share (RFC 0031).
4//!
5//! The existing static-header path (`mcp::auth`) and the AAuth request-signer
6//! (`aauth`) are the `static`/`aauth` providers. This module owns the *new*
7//! surfaces: the durable [`Kind::Cred`](crate::state::Kind::Cred) [`cache`], and
8//! the OAuth 2.1 / OIDC [`oauth2`] flows (device grant + refresh + discovery)
9//! that power `agentd login`. AWS SigV4/SSO and SPIFFE providers land behind the
10//! `aws`/`spiffe` features in later phases.
11
12pub mod cache;
13
14#[cfg(feature = "oauth")]
15pub mod oauth2;
16
17#[cfg(feature = "oauth")]
18pub mod challenge;
19
20#[cfg(feature = "oauth")]
21pub mod login;
22
23#[cfg(feature = "oauth")]
24pub mod device;
25
26#[cfg(feature = "oauth")]
27pub mod aws;
28
29#[cfg(feature = "oauth")]
30pub mod aws_sso;
31
32#[cfg(feature = "oauth")]
33pub mod browser;