aauth 0.0.2

Rust implementation of the AAuth authorization protocol
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38

use crate::server::deferred::PendingStore;
use crate::server::policy::ResourceConsentPolicy;
use crate::server::resource::opaque::OpaqueAccessStore;

/// How a resource server evaluates access for incoming agent requests.
#[derive(Clone)]
pub enum ResourceAccessMode<P, S, O>
where
    P: ResourceConsentPolicy,
    S: PendingStore,
    O: OpaqueAccessStore + Clone,
{
    /// Grant based on verified agent or auth token identity alone.
    IdentityBased,
    /// Delegate authorization to the agent's Person Server (or Access Server when federated).
    PsAsserted {
        require_auth_token: bool,
        access_server_url: Option<String>,
        person_server_fallback: Option<String>,
    },
    /// Resource manages authorization via interaction and opaque access tokens.
    ResourceManaged {
        policy: P,
        pending: S,
        opaque: O,
        interaction_url: String,
        pending_base_url: String,
        pending_path: String,
        pending_ttl_secs: u64,
    },
}

/// Type-erased mode for callers that do not need resource-managed generics.
pub type ResourceAccessPolicy = ResourceAccessMode<
    crate::server::policy::AlwaysGrantResourcePolicy,
    crate::server::deferred::InMemoryPendingStore,
    crate::server::resource::InMemoryOpaqueAccessStore,
>;