//! OAuth 2.0 bearer Authenticator for klieo HTTP transports.
//!
//! Implements [`klieo_auth_common::Authenticator`] with local JWT
//! verification + a JWKS cache fetched at builder construction +
//! refreshed on signature-verification failure. Scope-based method
//! authorization via an operator-supplied allow-list.
//!
//! See ADR-021 and the cluster 0.21 spec for design details. T3
//! fills in the actual verifier; T2 is the crate skeleton.
pub use OAuthAuthenticator;
pub use OAuthAuthenticatorBuilder;
pub use OAuthError;