Module authentication 

Provider-neutral authentication scope and execution contracts.

Structs

AuthenticatedRequest

Request plus mandatory provider or operation-owned authentication policy.

AuthenticationScope

Immutable borrowed scope bound to one admitted credential.

AuthenticationScopeError

Payload-free authentication-scope policy failure.

AuthenticationScopePolicy

Complete provider or operation-owned authentication-scope policy.

CanonicalSigningInput

Cleanup-owning canonical input that retains the exact hashed request.

CredentialGeneration

Monotonic generation of one credential state.

RefreshHandoff

Opaque generation captured before an external refresh operation begins.

ScopeValue

Borrowed, bounded provider-owned authentication-scope value.

SignedRequest

Exact request and validated signature produced from one canonical snapshot.

SigningAlgorithm

Borrowed provider-owned signature algorithm identifier.

SigningContext

Complete security domain bound into one canonical signature.

SigningDigestAlgorithm

Borrowed provider-owned request-body digest algorithm identifier.

SigningFreshness

Caller-owned nonce and observed time bound into one anti-replay context.

SigningHeaders

Canonically ordered request headers selected by provider signing policy.

SigningKeyId

Borrowed provider-owned signing key identifier.

SigningNonce

Borrowed caller-provided nonce.

UnixTime

Caller-observed Unix time in whole seconds.

Enums

CredentialGenerationError

Credential-generation transition error.

ScopeField

Authentication-scope field that failed policy validation.

ScopeRequirement

Provider or operation requirement for one authentication-scope field.

ScopeValueError

Authentication-scope value validation error.

ScopeViolation

Payload-free reason a scope field failed validation.

SigningBuildError

Body hashing and canonical signing-input construction failure.

SigningContextValueError

Signing-context text validation failure.

SigningInputError

Canonical signing-input construction failure.

SigningOutputError

Validated signing-output failure.

SigningValueError

Bounded signing value validation failure.

Constants

MAX_CANONICAL_SIGNING_INPUT_BYTES

Maximum complete canonical signing-input bytes.

MAX_SCOPE_VALUE_BYTES

Maximum bytes in one provider-owned audience, account, or tenant binding.

MAX_SIGNING_ALGORITHM_BYTES

Maximum bytes in a signing algorithm identifier.

MAX_SIGNING_BODY_DIGEST_BYTES

Maximum request-body digest bytes accepted by the canonical format.

MAX_SIGNING_DIGEST_ALGORITHM_BYTES

Maximum bytes in a body-digest algorithm identifier.

MAX_SIGNING_HEADERS

Maximum selected request headers.

MAX_SIGNING_KEY_ID_BYTES

Maximum bytes in a signing key identifier.

MAX_SIGNING_NONCE_BYTES

Maximum caller-provided nonce bytes accepted by the canonical format.

Traits

AsyncAuthenticatedTransport

Executor-neutral async transport requiring an authentication policy.

BlockingAuthenticatedTransport

Blocking transport that cannot execute without an authentication policy.

RequestBodyHasher

Caller-provided request-body hashing implementation.

RequestSigner

Caller-provided request-signing implementation.