kirino 0.7.6

Zero-trust authentication and authorization framework with RBAC and dynamic risk assessment.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89

pub mod audit;
pub mod cache;
#[cfg(feature = "rbac-constraints")]
pub mod constraints;
#[cfg(feature = "rbac-dynamic")]
pub mod dynamic;
pub mod engine;
#[cfg(feature = "rbac-hierarchy")]
pub mod hierarchy;
pub mod identity_subject;
pub mod permission;
pub mod policy;
pub mod scope;
pub mod session;
pub mod shared;
pub mod store;
pub mod subject;
pub mod traits;
pub mod workspace_guard;
pub mod prelude {

    #[cfg(feature = "rbac-constraints")]
    pub use crate::rbac::constraints::{
        CardinalityConstraint, ConstraintStore, ConstraintValidator, DsdPolicy,
        InMemoryConstraintStore, PrerequisiteConstraint, SsdPolicy, TemporalConstraint,
    };
    #[cfg(feature = "rbac-dynamic")]
    pub use crate::rbac::dynamic::{
        anomaly::{AnomalyDetector, AnomalyScore, BehaviorBaseline},
        arbiter::AuthorizationArbiter,
        delegator::{Delegator, DelegatorType},
        domain::{DomainMatch, DomainScope, TaskDomain},
        metrics::{ActionCategory, ActionRequest, ActionSensitivity},
        policy::{default_dynamic_policy, DynamicPolicy},
        trust::{
            InMemoryTrustScoreStore, TrustDecayHandle, TrustDecayWorker, TrustScore,
            TrustScoreStore,
        },
        verdict::{
            ActionOutcome, AuthorizationVerdict, AutonomyLevel, RiskScore, Strategy, SubScores,
        },
    };
    #[cfg(feature = "rbac-hierarchy")]
    pub use crate::rbac::hierarchy::{
        detect_cycle, resolve_role_chain, HierarchicalRole, HierarchyNode,
    };
    #[cfg(feature = "rbac-dynamic")]
    pub use crate::rbac::store::persistence::PersistentTrustStore;
    #[cfg(feature = "rbac-constraints")]
    pub use crate::rbac::store::persistence::{
        AssignmentRow, AuditRow, ConstraintRow, PersistentAssignmentStore, PersistentAuditStore,
        PersistentConstraintStore, PersistentRoleStore, PersistentStore, RoleRow,
    };

    /// Only available with `auth-password`: minting a bootstrap credential needs the
    /// password generator.
    #[cfg(feature = "auth-password")]
    pub use crate::rbac::policy::bootstrap_credential;
    pub use crate::rbac::{
        audit::{
            AuditAction, AuditAlert, AuditAnalyzer, AuditCondition, AuditEntry, AuditFilter,
            AuditLogger, AuditPolicyEngine, AuditRule, AuditSeverity, AuditSink, AuditVerdict,
            DefaultAuditAnalyzer, InMemoryAuditPolicyEngine, InMemoryAuditSink,
        },
        cache::{PermissionCache, TtlPermissionCache},
        engine::RbacEngine,
        identity_subject::{Delegatable, IdentitySubject},
        permission::Permission,
        policy::{
            BootstrapCredential, InMemoryPasswordStateStore, PasswordChangeReason, PasswordPolicy,
            PasswordState, PasswordStateStore,
        },
        session::{InMemorySessionManager, Session, SessionManager},
        shared::Shared,
        store::{
            InMemoryAssignmentStore, InMemoryRoleStore, SimpleRole, StaticPermissionRegistry,
            StaticRoleRegistry,
        },
        subject::StringSubject,
        traits::{
            AssignmentStore, GrantResolver, GrantSource, Permission as PermissionTrait,
            PermissionContext, PermissionDecision, PermissionRegistry, Role, RoleRegistry,
            RoleStore, Subject, SystemRole, WorkspaceRole,
        },
        workspace_guard::{
            InMemoryWorkspaceStore, ScopedPermission, WorkspaceGuard, WorkspaceStore,
        },
    };
}