aauth 0.0.2

Rust implementation of the AAuth authorization protocol
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85

//! Rust implementation of the [AAuth authorization protocol](https://github.com/dickhardt/AAuth).
//!
//! # Features
//!
//! - `client` — framework-agnostic auth flow and key material (`client::injector`, `client::keys`)
//! - `client-reqwest` — reqwest middleware and token exchange (`client::reqwest`)
//! - `server` — token verification, resource token creation, policy traits, pending store
//! - `server-axum` — axum middleware and route helpers (`server::axum`)
//!
//! # Protocol roles
//!
//! - **Agent** — [`client`]
//! - **Resource server** — [`server::resource`]
//! - **Person server** — [`server::person`]
//! - **Access server** — [`server::access`]

pub mod error;
pub mod headers;
pub mod interaction_code;
pub mod jwt;
pub mod keys;
pub mod metadata;
pub mod signature;
pub mod types;

#[cfg(feature = "client")]
pub mod client;

#[cfg(feature = "server")]
pub mod server;

#[cfg(feature = "client")]
pub use client::keys::{
    AgentJwtMinter, KeyMaterialProvider, StaticKeyMaterialProvider, TestAgentJwtMinter,
    create_key_provider, mint_agent_jwt,
};
#[cfg(feature = "client")]
pub use client::resolve::{
    agent_jwt_from_signature_key, person_server_from_agent_jwt, resolve_person_server_url,
    resource_token_audience_unverified,
};
pub use error::{AAuthError, Result, TokenError};
pub use headers::{
    build_aauth_requirement, build_capabilities_header, build_mission_header,
    parse_aauth_requirement, parse_capabilities_header, parse_mission_header,
};
pub use interaction_code::{canonicalize_code, generate_code};
pub use jwt::{
    ActClaim, AgentClaims, AuthClaims, CnfClaim, OkpJwk, OkpSigningJwk, ResourceClaims,
    VerifiedToken, decode_resource_token_unverified, jwk_set_from_okp, jwk_thumbprint,
};
pub use keys::{
    Ed25519KeyPair, OkpSigningKey, TestKeys, create_test_keys, static_agent_metadata_fetcher,
    static_person_metadata_fetcher,
};
pub use metadata::{MetadataFetcher, StaticMetadataFetcher};
#[cfg(all(feature = "server", feature = "server-axum"))]
pub use server::access::{
    AccessAuthJwtMinter, AccessServerMetadata, TestAccessAuthJwtMinter, mint_access_auth_jwt,
};
#[cfg(all(feature = "server", feature = "server-axum"))]
pub use server::deferred::{build_accepted, build_payment_required_stub};
#[cfg(feature = "server")]
pub use server::person::{
    federate_to_access_server, fulfill_token_exchange, verify_federated_auth_token,
    FederationConfig, FederationOutcome,
};
#[cfg(feature = "server")]
pub use server::{
    AccessTokenContext, AccessTokenPolicy, AlwaysGrantAccessPolicy, AlwaysGrantPersonPolicy,
    AlwaysGrantResourcePolicy, AuthGrant, AuthJwtMinter, ClarificationThenGrantAccessPolicy,
    ClarificationThenGrantPersonPolicy, DeferApprovalAccessPolicy, DeferClaimsAccessPolicy,
    DeferInteractionAccessPolicy, DeferInteractionPersonPolicy, DeferInteractionResourcePolicy,
    DeferRequirement, Ed25519ResourceTokenSigner, FederationPendingState, FixedSubPersonPolicy,
    InMemoryOpaqueAccessStore, InMemoryPendingStore, OpaqueAccessStore, PendingContext,
    PendingInput, PendingKind, PendingOutcome, PendingRecord, PendingSnapshot, PendingStatus,
    PendingStore, PersonPendingContext, PersonTokenContext, PersonTokenDecision,
    PersonTokenPolicy, PolicyError, ResourceAccessContext, ResourceAccessMode,
    ResourceAccessPolicy, ResourceConsentDecision, ResourceConsentPolicy, ResourceTokenOptions,
    ResourceTokenSigner, TestAuthJwtMinter, TokenPolicyDecision, VerifyResourceTokenOptions,
    VerifyTokenOptions, create_resource_token, mint_auth_jwt, resolve_resource_token_audience,
    verify_resource_token, verify_token, ClaimsSubmission, DEFAULT_PENDING_TTL_SECS,
    generate_pending_id, pending_location,
};
pub use types::*;