Struct Authenticator 

pub struct Authenticator { /* private fields */ }

Issues and verifies credentials for one running server.

Implementations

impl Authenticator

pub fn new(secret: impl Into<Vec<u8>>, session_ttl_secs: u64) -> Self

pub fn hash_password(&self, plaintext: &str) -> Result<String, Error>

Hash a plaintext password with argon2id (random salt).

pub fn verify_password(&self, plaintext: &str, hash: &str) -> bool

Verify a plaintext password against a stored argon2 hash.

pub fn issue_token(&self, user_id: Uuid) -> Result<String, Error>

Mint a signed session JWT for a user id.

pub fn verify_token(&self, token: &str) -> Result<Uuid, Error>

Verify a session JWT and recover the user id it was issued for.

pub fn generate_api_key(&self) -> (String, String)

Generate a new API key: (plaintext, sha256_hex). The plaintext is shown to the user once; only the hash is stored.

pub fn hash_api_key(plaintext: &str) -> String

Deterministic hash used to look an API key up. SHA-256 (not argon2) so a single indexed equality lookup resolves the key.

Trait Implementations

impl Clone for Authenticator

fn clone(&self) -> Authenticator

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.