Skip to main content

camel_auth/
lib.rs

1//! Authentication and authorization primitives for rust-camel.
2//!
3//! Provider-neutral OIDC auth service. Configurable claim mapping via [`ClaimsMapper`]
4//! enables any OIDC-compliant provider. Provider-specific presets live in their
5//! respective component crates (e.g. `camel-component-keycloak`).
6//!
7//! Core types (`SecurityPolicy`, `AuthorizationDecision`, `Principal`)
8//! live in `camel-api` so `camel-core` and `camel-dsl` can reference
9//! them without depending on this crate.
10
11pub mod bearer;
12pub mod bearer_token_layer;
13pub mod built_in;
14pub mod claims;
15pub mod credential_source;
16pub mod http_client;
17pub mod introspection;
18pub mod introspection_auth;
19pub mod jwks;
20pub mod jwt;
21pub mod native_auth;
22pub mod oauth2;
23pub mod permission;
24pub mod permission_cache;
25pub mod permission_policy;
26pub mod registry;
27pub mod token_authenticator;
28pub mod types;
29
30pub use bearer::extract_bearer_token;
31pub use bearer_token_layer::{BearerTokenLayer, BearerTokenService};
32pub use built_in::{RolePolicy, ScopePolicy};
33pub use claims::{ClaimPaths, ClaimsMapper, JsonPointerClaimsMapper, escape_json_pointer};
34pub use credential_source::{CredentialSource, extract_token_multi, redact_query_params};
35pub use http_client::{SsrfClientOptions, validate_uri};
36pub use introspection::{
37    CachingTokenIntrospector, IntrospectionCacheOptions, IntrospectionResult, TokenIntrospector,
38};
39pub use introspection_auth::IntrospectionAuthenticator;
40pub use jwks::{Jwk, JwksProvider, RemoteJwksProvider};
41pub use jwt::{JwtValidator, LocalJwtValidator};
42pub use oauth2::{ClientCredentialsProvider, TokenProvider};
43pub use registry::PermissionEvaluatorRegistry;
44pub use registry::SecurityPolicyRegistry;
45pub use token_authenticator::TokenAuthenticator;
46pub use types::AuthError;
47
48pub use permission::{
49    PermissionContextConfig, PermissionDecision, PermissionEvaluator, PermissionRequest,
50    PermissionValueSource,
51};
52
53pub use permission_cache::{CachingPermissionEvaluator, PermissionCacheOptions};
54
55pub use permission_policy::PermissionPolicy;
56
57pub use native_auth::{NativeCredential, NativeCredentialSecret, StaticTokenAuthenticator};
58
59pub use camel_api::security_policy::{
60    AuthorizationDecision, PRINCIPAL_KEY, Principal, SecurityPolicy, SecurityPolicyConfig,
61};