Crate allowthem_core 

Re-exports

pub use access_tokens::AccessTokenClaims;

pub use access_tokens::has_scope;

pub use audit::AuditEntry;

pub use audit::AuditEvent;

pub use auth_client::AuthClient;

pub use auth_client::AuthFuture;

pub use auth_client::EmbeddedAuthClient;

pub use csrf::derive_csrf_token;

pub use csrf::verify_csrf_token;

pub use db::Db;

pub use email::EmailMessage;

pub use email::EmailSender;

pub use email::EmailTemplate;

pub use email::LogEmailSender;

pub use email::NoopEmailSender;

pub use email_config::EmailConfig;

pub use email_config::EmailConfigMode;

pub use email_config::ManagedOverride;

pub use email_config::SetEmailConfig;

pub use email_config::SmtpOverride;

pub use email_config::SmtpTlsMode;

pub use email_config::WebhookOverride;

pub use email_render::EmailBranding;

pub use email_render::RenderedEmail;

pub use email_render::render as render_email;

pub use email_smtp::SmtpConfig;

pub use email_smtp::SmtpEmailSender;

pub use email_smtp::SmtpTls;

pub use email_webhook::WebhookEmailConfig;

pub use email_webhook::WebhookEmailSender;

pub use error::AccessTokenError;

pub use error::AuthError;

pub use event_sink::AuthEvent;

pub use event_sink::EventSink;

pub use event_sink::LoggingEventSink;

pub use event_sink::NoopEventSink;

pub use events::EventContext;

pub use events::LifecycleEvent;

pub use events::LifecycleEventReceiver;

pub use events::LifecycleEventSender;

pub use events::RegisteredEvent;

pub use events::RegistrationSource;

pub use handle::AllowThem;

pub use handle::AllowThemBuilder;

pub use handle::BuildError;

pub use handle::LoginOutcome;

pub use handle::OnUserActive;

pub use invitations::Invitation;

pub use jwt::Claims;

pub use jwt::JwtConfig;

pub use jwt::generate_token as generate_jwt;

pub use jwt::validate_token;

pub use oauth::OAuthAccountInfo;

pub use oauth::OAuthProvider;

pub use oauth::OAuthStateInfo;

pub use oauth::OAuthUserInfo;

pub use oauth_github::GitHubProvider;

pub use oauth_google::GoogleProvider;

pub use sessions::SessionConfig;

pub use sessions::generate_token;

pub use sessions::hash_token;

pub use sessions::parse_session_cookie;

pub use sessions::session_cookie;

pub use signing_keys::JwkEntry;

pub use signing_keys::JwkSet;

pub use signing_keys::OidcDiscovery;

pub use signing_keys::SigningKey;

pub use signing_keys::build_discovery;

pub use signing_keys::build_jwks;

pub use signing_keys::decrypt_private_key;

pub use social_github::GitHubSocialProvider;

pub use social_google::GoogleSocialProvider;

pub use social_oidc::CustomOidcSocialProvider;

pub use social_oidc::DISCOVERY_TTL;

pub use social_oidc::DiscoveryDoc;

pub use social_providers::ProviderType;

pub use social_providers::SocialProvider;

pub use social_providers::SocialProviderConfig;

pub use social_providers::SocialProviderRow;

pub use social_providers::SocialUserInfo;

pub use social_providers::build_social_provider;

pub use token_issuance::RefreshToken;

pub use token_issuance::TokenError;

pub use token_issuance::TokenResponse;

pub use token_issuance::compute_at_hash;

pub use token_issuance::exchange_authorization_code;

pub use token_issuance::exchange_refresh_token;

pub use token_issuance::generate_refresh_token;

pub use token_issuance::hash_refresh_token;

pub use token_issuance::mint_access_token;

pub use token_issuance::mint_id_token;

pub use token_issuance::verify_pkce_s256;

pub use webhook_sig::SigError;

pub use webhook_sig::sign_payload;

pub use webhook_sig::verify_payload;

pub use types::*;

Modules

access_tokens

api_tokens

applications

audit

auth_client

authorization

csrf

db

email

email_config

Per-tenant email-sender configuration.

email_render

Render EmailTemplate instances to branded HTML + plain text.

email_smtp

SMTP email delivery via lettre.

email_verification

email_webhook

HTTP webhook email delivery.

error

event_sink

events

Lifecycle events published by allowthem’s route handlers.

handle

invitations

jwt

oauth

oauth_github

oauth_google

password

password_reset

permissions

roles

sessions

signing_keys

RS256 signing key management — key generation, encrypted storage, JWKS, and OIDC discovery.

social_github

GitHub SocialProvider implementation.

social_google

Google SocialProvider implementation.

social_oidc

Custom OIDC SocialProvider implementation.

social_providers

DB-backed social-login provider configuration and runtime surface.

token_cleanup

token_issuance

totp

TOTP core: secret management, code validation, and recovery codes.

types

users

webhook_sig

HMAC-SHA256 signing for outbound webhook payloads.