Struct FapiManager 

pub struct FapiManager { /* private fields */ }

FAPI 2.0 Security Profile Manager

Implementations

impl FapiManager

pub fn new( config: FapiConfig, dpop_manager: Arc<DpopManager>, mtls_manager: Arc<MutualTlsManager>, par_manager: Arc<PARManager>, private_key_jwt_manager: Arc<PrivateKeyJwtManager>, jwt_validator: Arc<SecureJwtValidator>, ) -> Self

Create a new FAPI manager

pub async fn validate_authorization_request( &self, request_object: &str, client_cert: Option<&str>, dpop_proof: Option<&str>, request_uri: Option<&str>, ) -> Result<FapiRequestObject>

Validate FAPI 2.0 authorization request

pub async fn authenticate_client_jwt( &self, client_assertion: &str, ) -> Result<String>

Authenticate client using private key JWT (RFC 7523)

pub async fn validate_token_request( &self, client_assertion: Option<&str>, client_cert: Option<&str>, dpop_proof: Option<&str>, authorization_code: &str, ) -> Result<String>

Validate FAPI token request with enhanced security

pub async fn generate_authorization_response( &self, client_id: &str, code: Option<&str>, state: Option<&str>, error: Option<&str>, error_description: Option<&str>, ) -> Result<String>

Generate FAPI 2.0 authorization response (JARM)

pub async fn generate_token_response( &self, client_id: &str, user_id: &str, scopes: Vec<String>, cert_thumbprint: Option<String>, dpop_jkt: Option<String>, ) -> Result<FapiTokenResponse>

Generate FAPI 2.0 token response

pub async fn create_session( &self, client_id: &str, user_id: &str, scopes: Vec<String>, dpop_proof: Option<String>, cert_thumbprint: Option<String>, request_jti: Option<String>, ) -> Result<String>

Create FAPI session

pub async fn get_session(&self, session_id: &str) -> Result<Option<FapiSession>>

Get FAPI session

pub async fn validate_session(&self, session_id: &str) -> Result<FapiSession>

Validate FAPI session

pub async fn remove_session(&self, session_id: &str) -> Result<()>

Remove FAPI session

pub async fn audit_log(&self, event: &str, details: &Value) -> Result<()>

Audit log entry for FAPI compliance

pub fn check_compliance(&self) -> Vec<FapiComplianceViolation>

Validate FAPI 2.0 compliance of the current configuration.

Returns a list of compliance violations. An empty list means the configuration is fully FAPI 2.0 compliant.

pub fn is_compliant(&self) -> bool

Returns true if the configuration is fully FAPI 2.0 compliant (no critical violations).

pub async fn validate_sender_constrained_token( &self, access_token: &str, dpop_proof: Option<&str>, client_cert: Option<&str>, http_method: &str, http_uri: &str, ) -> Result<Value>

Validate a sender-constrained access token at a resource server.

Verifies that the token’s cnf claim matches the presented proof (DPoP proof JKT or mTLS certificate thumbprint).

pub fn validate_authorization_details( &self, authorization_details: &[AuthorizationDetail], ) -> Result<()>

Validate a Rich Authorization Request (RFC 9396) authorization_details parameter.

Trait Implementations

impl Clone for FapiManager

fn clone(&self) -> FapiManager

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for FapiManager

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.