1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
//! Zero-overhead JWT authentication, RBAC middleware, and password hashing
//! for the Chopin web framework.
//!
//! # Quick Start
//!
//! ```rust,ignore
//! use chopin_auth::{
//! HasJti, JwtManager, PasswordHasher, TokenBlacklist, init_jwt_manager, Auth,
//! };
//! use serde::{Deserialize, Serialize};
//!
//! #[derive(Debug, Serialize, Deserialize)]
//! struct Claims {
//! sub: String,
//! jti: String,
//! exp: u64,
//! }
//!
//! impl HasJti for Claims {
//! fn jti(&self) -> Option<&str> { Some(&self.jti) }
//! }
//!
//! // Once at server startup:
//! let blacklist = TokenBlacklist::new();
//! let manager = JwtManager::new(b"my-secret").with_blacklist(blacklist.clone());
//! init_jwt_manager(manager);
//!
//! // In a route handler, use `Auth<Claims>` as an extractor:
//! // async fn my_handler(auth: Auth<Claims>) -> Response { ... }
//!
//! // Hash a password:
//! let hash = PasswordHasher::interactive().hash(b"p4ssw0rd")?;
//!
//! // Revoke a token (e.g. on logout):
//! // blacklist.revoke(claims.jti.clone(), Some(claims.exp));
//! ```
pub use ;
pub use ;
pub use JwksProvider;
pub use ;
pub use ;
pub use ;
pub use TokenBlacklist;
pub use StandardClaims;