cf-gears-toolkit-security 0.11.0

ToolKit security library
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29

use uuid::Uuid;
use uuid::uuid;

/// Default tenant ID for single-tenant or auth-disabled deployments.
///
/// Used when:
/// - Auth is disabled (on-premises single-user mode)
/// - Default/fallback tenant ID is needed (e.g., migrations, examples)
///
/// In multi-tenant production deployments, tenant IDs come from
/// the authentication layer or tenant resolver.
pub const DEFAULT_TENANT_ID: Uuid = uuid!("00000000-df51-5b42-9538-d2b56b7ee953");

/// Default subject ID for single-tenant or auth-disabled deployments.
///
/// Used when:
/// - Auth is disabled (on-premises single-user mode)
/// - Default/fallback subject ID is needed
///
/// In production deployments, subject IDs come from the authentication layer.
pub const DEFAULT_SUBJECT_ID: Uuid = uuid!("11111111-6a88-4768-9dfc-6bcd5187d9ed");

/// Header (HTTP) / metadata (gRPC) key carrying the platform-plane internal
/// credential. Always lower-case (canonical for both HTTP/2 and gRPC metadata).
///
/// Platform-plane (system) calls use this key — **never** `Authorization`, to
/// avoid colliding with the tenant-plane user JWT
/// (`cpt-cf-adr-platform-plane-auth` / `cpt-cf-adr-two-plane-auth`).
pub const INTERNAL_TOKEN_HEADER: &str = "x-toolkit-internal-token";