1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
//! Authentication utilities for the EJ framework.
//!
//! Provides JWT tokens, password hashing, and content verification for EJ services.
//!
//! # Features
//!
//! - **JWT Tokens**: Create and validate JSON Web Tokens
//! - **Password Hashing**: Secure Argon2-based password storage
//! - **SHA-256**: Content hashing for integrity checks
//! - **Auth Responses**: Standard Bearer token responses
//!
//! # Components
//!
//! ## JWT ([`jwt`])
//!
//! Create and validate JWT tokens for service authentication.
//!
//! ## Passwords ([`secret_hash`])
//!
//! Hash and verify passwords using Argon2.
//!
//! ## Hashing ([`sha256`])
//!
//! SHA-256 hashing for content integrity.
//!
//! ## Responses ([`auth_body`])
//!
//! Standard authentication response structures.
//!
//! # Examples
//!
//! ## JWT Tokens
//!
//! ```rust
//! use ej_auth::jwt::{jwt_encode, jwt_decode};
//! use serde::{Serialize, Deserialize};
//! use std::env;
//! unsafe { env::set_var("JWT_SECRET", "MySuperSecret"); }
//!
//! #[derive(Debug, PartialEq, Eq, Serialize, Deserialize)]
//! struct Claims {
//! sub: String,
//! exp: usize,
//! }
//!
//! let claims = Claims {
//! sub: "user-123".to_string(),
//! exp: 4118335200,
//! };
//!
//! let token = jwt_encode(&claims).unwrap();
//! let decoded = jwt_decode::<Claims>(&token).unwrap();
//! assert_eq!(claims, decoded.claims);
//! ```
//!
//! ## Password Hashing
//!
//! ```rust
//! use ej_auth::secret_hash::{generate_secret_hash, is_secret_valid};
//!
//! let password = "my_password";
//! let hash = generate_secret_hash(password).unwrap();
//! let is_valid = is_secret_valid(password, &hash).unwrap();
//! assert!(is_valid);
//! ```
//!
//! ## Content Hashing
//!
//! ```rust
//! use ej_auth::sha256::generate_hash;
//!
//! let content = "some data";
//! let hash = generate_hash(content);
//! assert_eq!(hash.len(), 64);
//! ```
//!
//! # Security Notes
//!
//! - Keep JWT secrets secure and rotate regularly
//! - Set appropriate token expiration times
//! - Store passwords as hashes only
//! - Use HTTPS for authentication
//!
//! # Configuration
//!
//! Set `JWT_SECRET` environment variable for token signing.
/// JWT issuer identifier.
pub const ISS: &str = "EJ";
/// HTTP Authorization header name.
pub const AUTH_HEADER: &str = "Authorization";
/// Bearer token prefix.
pub const AUTH_HEADER_PREFIX: &str = "Bearer ";
/// Token type for connection tokens.
pub const CONNECTION_TOKEN_TYPE: &str = "Bearer";