assay-auth 0.6.0

Authentication, OIDC (client + provider), passkey, Argon2, JWT, Biscuit capability tokens, session management, and Zanzibar-style authorization for assay-engine.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40

//! Zanzibar / ReBAC layer — Keto / SpiceDB-equivalent authorization.
//!
//! Module shape:
//!
//! - [`types`] — POD types: [`Tuple`], [`ObjectRef`], [`SubjectRef`],
//!   [`NamespaceSchema`], [`PermissionExpr`], [`Consistency`],
//!   [`CheckResult`], [`UsersetTree`].
//! - [`schema`] — SpiceDB-compatible DSL parser.
//! - [`resolve`] — permission-expression → seed relation set
//!   computation, shared by both backend impls.
//! - [`store`] — the [`ZanzibarStore`] async trait.
//! - [`postgres`] / [`sqlite`] — recursive-CTE-backed implementations.
//!
//! Why a directory module: phase 6 is the largest single auth module
//! by line count. Splitting it keeps each file under ~500 LOC while
//! preserving the `assay_auth::zanzibar::ZanzibarStore` import shape
//! callers expect. Compile-time `auth-zanzibar` feature still gates
//! the entire tree.

pub mod eval;
#[cfg(feature = "backend-postgres")]
pub mod postgres;
pub mod resolve;
pub mod schema;
#[cfg(feature = "backend-sqlite")]
pub mod sqlite;
pub mod store;
pub mod types;

pub use schema::{ParseError, parse_schema};
pub use store::ZanzibarStore;
pub use types::{
    CheckResult, Consistency, MAX_DEPTH, NamespaceSchema, ObjectRef, PermissionExpr, RelationDef,
    RelationKind, SubjectRef, TreeOp, Tuple, TupleFilter, TypeRef, UsersetTree,
};

#[cfg(feature = "backend-postgres")]
pub use postgres::PostgresZanzibarStore;
#[cfg(feature = "backend-sqlite")]
pub use sqlite::SqliteZanzibarStore;