chronon-axum
HTTP API under /api/chronon/* — jobs, runs, scripts.
Features
| Topic | Behavior |
|---|---|
AdminAuth / RequireAdmin |
Host verifier on ChrononState; lab: StaticTokenAdminAuth, AllowAllAdminAuth |
CHRONON_REQUIRE_ADMIN_AUTH |
Builder and extractor fail closed without a verifier |
| Upsert | Matched by job_name; updates preserve job_id and bump revision |
External actor_json |
Rejects System-shaped JSON; in-process may set System |
| List jobs/runs | Default limit 100, capped at 1000 |
| Revisions | HTTP response redacts actor/params; store keeps full snapshots |
| Errors | Sanitize + redact URL userinfo in envelopes |
Production security
Install AdminAuth, set CHRONON_REQUIRE_ADMIN_AUTH=1, and wrap-before-public-bind. See SECURITY.md and the axum_auth_wrap example.
Mount
use Arc;
use ;
let chronon = builder
.admin_auth
.require_admin_auth
.build?;
new
.nest
.with_state