foundation_auth 0.0.4

Authentication and authorization — OAuth2/OIDC flows, JWT handling, password hashing (Argon2), TOTP, and session management with Turso/SQLite and wasm-bindgen backends
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88

//! Foundation Auth - Comprehensive authentication infrastructure.
//!
//! This crate provides authentication flows, credential management, and token handling
//! for use with AI inference providers and other services requiring authentication.

pub mod shared;

#[cfg(not(target_family = "wasm"))]
pub mod native;

#[cfg(feature = "server")]
pub mod server;

#[cfg(any(feature = "wasm-bindgen-oauth", feature = "wasm-bindgen-session"))]
pub mod wasm_bindgen;

// Re-export shared items at crate root for backward compatibility.
pub use shared::types::{
    AuthCredential, Authenticated, AuthenticationErrors, AuthenticationResult,
    AuthenticationStates, ConfidentialText, JwtCredential, OnAuthData, OAuthCredential,
    AuthProviderEndpoint, SessionCredential,
};
pub use shared::auth_manager::{AuthManager, AuthManagerConfig, AuthManagerError};
pub use shared::auth_state::{AuthEvent, AuthState, AuthStateError, AuthStateMachine, QueuedRequest};
pub use shared::auth_token::AuthToken;
pub use shared::credential_store::{
    AsyncCredentialStore, CredentialStorage, CredentialStore, CredentialStoreError, OAuthState, OAuthTokenStore,
    StoredCredential,
};

// Feature 01: JWT Verifier
pub use shared::jwt::{
    JwtAlgorithm, JwtError, JwtManager, JwtToken, JwtVerifier, JwtVerifierConfig, JwtSigningKey,
    PublicKeySource, VerifiedClaims,
};

// Feature 02: JWKS Manager
pub use shared::jwks::{Jwk, Jwks, JwksError, JwksManager};

// Feature 03: OIDC Discovery
pub use shared::discovery::{DiscoveryClient, DiscoveryError, OidcDiscovery};

// Feature 03: Unified Upstream OIDC/OAuth2 Client (cross-platform — native + wasm)
pub use shared::upstream_client::{UpstreamClientError, UpstreamOidcClient, UpstreamProfile};

// Feature 01/03: Upstream provider models (cross-platform, pure serde)
pub use shared::provider::{ProviderMapping, ProviderType, ProviderUpdate, UpstreamProvider};

// Feature 04: UserInfo Client
pub use shared::userinfo::{UserInfo, UserInfoClient, UserInfoError};

// Feature 06: Token Introspection
pub use shared::introspection::{IntrospectionClient, IntrospectionError, IntrospectionResult};

pub use shared::middleware::{
    extract_bearer_token, extract_session_token, has_scope, optional_auth, require_auth,
    AuthContext, GuardResult,
};
pub use shared::auth_session::{
    AuthSessionError, UpstreamAuthSession, UpstreamAuthSessionStore, DEFAULT_AUTH_SESSION_TTL_SECS,
};

pub use shared::oauth::{OAuthConfig, OAuthConfigBuilder, OAuthError, OAuthManager, PkceChallenge};
pub use shared::oauth::TokenResponse;
pub use shared::oauth_token::OAuthToken;
pub use shared::session::{Session, SessionConfig, SessionError, SessionManager};
pub use shared::two_factor::{BackupCodeSet, TOTPSecret, TwoFactorChallenge, TwoFactorError};

// Re-export platform-specific OAuth wrappers.
#[cfg(not(target_family = "wasm"))]
pub use native::oauth::NativeOAuth;

// Feature 05: Password Auth (native only)
#[cfg(not(target_family = "wasm"))]
pub use native::password_auth::{
    LoginResult, LoginRequest, MfaType, PasswordAuthClient, PasswordAuthError,
};

#[cfg(all(target_family = "wasm", feature = "wasm-bindgen-oauth"))]
pub use wasm_bindgen::oauth::WasmOAuth;

#[cfg(target_family = "wasm")]
#[cfg(feature = "wasm-bindgen-session")]
pub use wasm_bindgen::d1_credential_store::D1CredentialStore;

#[cfg(target_family = "wasm")]
#[cfg(feature = "wasm-bindgen-session")]
pub use wasm_bindgen::session::{SessionPayload, WasmSessionManager};