klieo_auth_oauth/lib.rs
1#![deny(missing_docs)]
2#![deny(rust_2018_idioms)]
3#![deny(rustdoc::broken_intra_doc_links)]
4
5//! OAuth 2.0 bearer Authenticator for klieo HTTP transports.
6//!
7//! Implements [`klieo_auth_common::Authenticator`] with local JWT
8//! verification + a JWKS cache fetched at builder construction +
9//! refreshed on signature-verification failure. Scope-based method
10//! authorization via an operator-supplied allow-list.
11//!
12//! See ADR-021 and the cluster 0.21 spec for design details. T3
13//! fills in the actual verifier; T2 is the crate skeleton.
14
15mod authenticator;
16mod builder;
17mod cache;
18mod discovery;
19mod error;
20mod http;
21mod introspect;
22mod jwks;
23
24pub use authenticator::OAuthAuthenticator;
25pub use builder::OAuthAuthenticatorBuilder;
26pub use error::OAuthError;