Crate aliri_tower

Authorizers for working with tower_http and other constructs in the ecosystem, including axum.

See the examples folder in the repository for a working example using an tonic web server. For a more ergonomic experience in axum, see the aliri_axum crate.

use axum::handler::Handler;
use aliri_oauth2::{scope, policy, ScopePolicy};
use aliri_tower::Oauth2Authorizer;

pub struct CustomClaims {
    // …
}

impl jwt::CoreClaims for CustomClaims {
    // …
}

let authority = construct_authority();
let authorizer = Oauth2Authorizer::new()
    .with_claims::<CustomClaims>()
    .with_terse_error_handler();

let app = axum::Router::new()
    .route(
        "/users",
        post(handle_post
            .layer(authorizer.scope_layer(policy![scope!["post_user"]]))),
    )
    .route(
        "/users/:id",
        get(handle_get
            .layer(authorizer.scope_layer(ScopePolicy::allow_one_from_static("get_user")))),
    )
    .layer(authorizer.jwt_layer(authority));

Modules

• util
  Utilities for generating HTTP responses on authorization falures

Structs

• Oauth2Authorizer
  Builder for generating layers that authenticate JWTs and authorize access based on oauth2 scope grants
• TerseErrorHandler
  Terse responders for authentication and authorization failures
• VerboseErrorHandler
  Verbose responders for authentication and authorization failures

Traits

• OnJwtError
  Handler for responding to failures while verifying a JWT
• OnScopeError
  Handler for responding to failures while verifying scope claims