Skip to main content

appcore_security/
lib.rs

1// =============================================================================
2//        #######
3//     ###       ###     F: lib.rs
4//    ##   ## ##   ##    P: AppCore-Runtime
5//         ## ##
6//                       C: 2026/05/29 20:47:35 by dnettoRaw
7//    ##   ## ##   ##    U: 2026/08/02 00:04:12 by dnettoRaw
8//      ###########      S: 1.0.1-rc.8
9// =============================================================================
10
11//! Security contracts for auth, policy, token trust, and secret boundaries.
12
13#![deny(missing_docs)]
14
15pub mod auth;
16pub mod dnt;
17pub mod hashtoken;
18pub mod policy;
19pub mod redaction;
20mod request_hash;
21pub mod secret;
22mod secret_file;
23mod secret_keyring;
24pub mod token;
25pub mod vault;
26
27pub use auth::{AuthContext, AuthDecision, Authenticator};
28pub use dnt::{DntSecretKeyProvider, DntSecretRefPolicy};
29pub use hashtoken::HashTokenProvider;
30pub use policy::{PolicyCheck, PolicyDecision};
31pub use redaction::redact_text;
32pub use secret::{
33    format_secret_material, new_rotated_secret, parse_secret_material, EnvSecretResolver,
34    PeerCredential, PeerCredentialProvider, SecretBytes, SecretFormatError, SecretResolver,
35    SecretStore, SecuritySecretMaterial, SecuritySecretMetadata, SecuritySecretRef,
36    SecuritySecretStatus, StaticPeerCredentialProvider, StaticSecretResolver,
37};
38pub use secret_file::FileSecretResolver;
39pub use secret_keyring::{
40    FileSecretKeyring, SecretAccessError, SecretAccessResult, FILE_SECRET_KEYRING_FORMAT,
41};
42pub use token::{
43    compute_request_hash, CommandTokenError, CommandTokenFactory, CommandTokenValidator,
44    RequestValidationDetails, RuntimeTokenClaims, SecurityError, SecurityResult, TokenClaims,
45    TokenProvider, DEFAULT_RUNTIME_TOKEN_TTL_MS, LOCAL_ADMIN_SUBJECT,
46};
47pub use vault::{Vault, VaultState};