Crate ankurah_jwt_auth

Structs§

AgentState: Combined policy config and verification keys, always updated atomically.
Duration: A duration type to represent an approximate span of time
JwtAgent: JWT-based PolicyAgent for ankurah.
JwtClaims: JWT claims carried in every token issued by the auth system.
JwtPolicy: Policy configuration entity stored in ankurah. The collection name is auto-derived as “jwtpolicy” (struct name lowercased).
JwtPolicyMut
JwtPolicyView
PolicyConfig: Top-level policy configuration.
ScopeRule: A conditional scope rule that injects a predicate filter into queries.
SigningKeys: Manages RSA keypair for signing and verifying JWTs.

AuthError
JwtContext: The context data extracted from a validated JWT, used for all policy checks. Root represents a privileged system context that bypasses all RBAC checks. NoUser represents an unauthenticated context (e.g. for reading the policy collection).
JwtKeys: Either a full signing keypair or a verify-only public key.
ScopeRuleOp: The operations a ScopeRule applies to.

parse_claims_unverified: Parse a JWT token without verifying the signature. Extracts claims from the payload section (base64url-decoded). Useful on clients that only need to read claims without access to the signing key.