Crate appcore_security 

Security contracts for auth, policy, token trust, and secret boundaries.

Re-exports

pub use auth::AuthContext;

pub use auth::AuthDecision;

pub use auth::Authenticator;

pub use dnt::DntSecretKeyProvider;

pub use dnt::DntSecretRefPolicy;

pub use hashtoken::HashTokenProvider;

pub use policy::PolicyCheck;

pub use policy::PolicyDecision;

pub use secret::format_secret_material;

pub use secret::new_rotated_secret;

pub use secret::parse_secret_material;

pub use secret::EnvSecretResolver;

pub use secret::PeerCredential;

pub use secret::PeerCredentialProvider;

pub use secret::SecretBytes;

pub use secret::SecretFormatError;

pub use secret::SecretResolver;

pub use secret::SecretStore;

pub use secret::SecuritySecretMaterial;

pub use secret::SecuritySecretMetadata;

pub use secret::SecuritySecretRef;

pub use secret::SecuritySecretStatus;

pub use secret::StaticPeerCredentialProvider;

pub use secret::StaticSecretResolver;

pub use token::compute_request_hash;

pub use token::CommandTokenError;

pub use token::CommandTokenFactory;

pub use token::CommandTokenValidator;

pub use token::RequestValidationDetails;

pub use token::RuntimeTokenClaims;

pub use token::SecurityError;

pub use token::SecurityResult;

pub use token::TokenClaims;

pub use token::TokenProvider;

pub use token::DEFAULT_RUNTIME_TOKEN_TTL_MS;

pub use token::LOCAL_ADMIN_SUBJECT;

pub use vault::Vault;

pub use vault::VaultState;

Modules

auth

Authentication contracts for runtime command and peer entry points.

dnt

DNT key-provider adapter backed by security secret resolvers.

hashtoken

HashToken adapter implementation for internal signed and sealed tokens.

policy

Authorization policy contracts for runtime commands and internal actions.

redaction

Security-facing re-export of the runtime redaction primitive.

secret

Secret reference contracts for local secure material handling.

token

Token contracts for internal runtime trust and delegation.

vault

Vault contracts for local secret lock/unlock boundaries.

Structs

FileSecretKeyring

Owner-only, process-safe secret keyring for one deployment directory.

FileSecretResolver

Resolves relative security references below one owner-only root.

Enums

SecretAccessError

Typed file-keyring policy and persistence failures.

Constants

FILE_SECRET_KEYRING_FORMAT

Stable persisted format identifier for the file keyring.

Functions

redact_text

Redacts common credential forms without attempting to parse business payloads.

Type Aliases

SecretAccessResult

Result returned by file-keyring operations.