Module security 

Security utilities: rate limiting, DoS protection, IP blocking, and JWT hardening. Security primitives and hardened implementations.

This module contains:

• [secure_jwt] — Production-grade JWT creation and validation with key-rotation and revocation support.
• [secure_mfa] — Hardened TOTP, backup-code, and recovery-flow logic.
• [secure_session] — Session management with abuse-detection guards.
• [timing_protection] — Constant-time comparison utilities to prevent timing side-channel attacks.
• [presets] — One-call security presets (HighSecurity, Standard, Development) and an automated security-audit report generator.

Most users interact with these through AuthFramework rather than importing security types directly.

Re-exports

pub use presets::SecurityAuditReport;

pub use presets::SecurityAuditStatus;

pub use presets::SecurityIssue;

pub use presets::SecurityPreset;

pub use presets::SecuritySeverity;

Modules

presets

Security presets for the Auth Framework

secure_jwt

secure_mfa

secure_session

secure_session_config

Enhanced Session Security Configuration

secure_utils

timing_protection

Timing attack protection utilities

Structs

AuditConfig

Audit logging configuration

BackupCodesConfig

Backup codes configuration

EmailConfig

Email configuration

LockoutConfig

Account lockout configuration

MfaConfig

Multi-Factor Authentication configuration

PasswordValidation

Password validation result

PasswordValidator

Password validator

SecurityContext

Security context for authentication operations

SmsConfig

SMS configuration

TotpConfig

TOTP (Time-based One-Time Password) configuration

Enums

PasswordStrength

Password strength assessment result