kirino 0.7.5

Zero-trust authentication and authorization framework with RBAC and dynamic risk assessment.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81

use chrono::{DateTime, Utc};
use serde::{Deserialize, Serialize};
use std::net::{Ipv4Addr, Ipv6Addr};
use uuid::Uuid;

use yuuka::derive_enum;

use super::credential::Credential;

#[derive(Debug, Clone, PartialEq, Eq, Hash, Serialize, Deserialize)]
pub struct MACAddress(pub String);

derive_enum!(
    #[derive(PartialEq, Serialize, Deserialize)]
    #[macros_recursive(serde(rename_all = "snake_case"))]
    pub enum Passport {
        StaticPassword(enum {
            OneTime {
                password: String,
            },
            Permanent {
                password: String,
            },
            Application {
                password: String,
                ref_services: Vec<Uuid>,
            }
        }),
        KeyPair {
            public_key: String,
            provider_ca: Uuid,
        },
        OAuth {
            token: String,
            expires_at: DateTime<Utc>,
            provider_sso: Uuid,
        },
        DynamicPassword(enum {
            TOTP {
                secret: String,
                length: u8,
                period: u8,
            },
            HOTP {
                secret: String,
                length: u8,
                counter: u64,
            },
            Verification {
                session: Uuid,
                expires_at: DateTime<Utc>,
                value: String,
                provider_entity: Uuid,
            },
        }),
        Captcha {
            session: Uuid,
            token: String,
            expires_at: DateTime<Utc>,
            provider_captcha: Uuid,
        },
        Biometric {
            session: Uuid,
            template: Uuid,
            provider_ai: Uuid,
        },
        WebAuthn {
            credential_id: Vec<u8>,
            public_key_cose: Vec<u8>,
            sign_count: u32,
        },
        TemporaryWhitelist(enum {
            ClientSource(enum {
                IPv4(Ipv4Addr),
                IPv6(Ipv6Addr),
                MAC(MACAddress),
            }),
            PreviousCredential(Credential),
        })
    }
);