entropy-auth 2026.7.31

Authentication and authorization for Entropy Softworks server and API projects
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22

//! Conditional-access policy evaluation and per-client claims transformation.
//!
//! Two pure, transport- and storage-free engines that back Entra-style
//! "conditional access" and "claims mapping":
//!
//! - [`access`] — evaluate a tenant's conditional-access [`Policy`](access::Policy)
//!   set against one sign-in and combine into a single grant / block / step-up
//!   [`Verdict`](access::Verdict).
//! - [`claims`] — apply an app registration's [`ClaimMapping`](claims::ClaimMapping)
//!   list to produce the extra custom claims for its tokens.
//!
//! The caller resolves the sign-in facts (groups, IP, device posture, risk)
//! and owns all persistence; these modules only decide.

pub mod access;
pub mod claims;

pub use access::{
    AccessRequest, AuthnStrength, CidrParseError, Conditions, DeviceState, Effect, GrantControl,
    IpCidr, Policy, RiskLevel, Selector, Verdict, evaluate,
};
pub use claims::{ClaimMapping, ClaimSource, transform};