oxidite-auth 2.3.1

Authentication and authorization for Oxidite (RBAC, JWT, OAuth2, 2FA, API keys)
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60

pub mod hasher;
pub mod jwt;
pub mod middleware;
pub mod rbac;

pub use hasher::{PasswordHasher, hash_password, verify_password};
pub use jwt::{JwtManager, create_token, verify_token, Claims};
pub use middleware::AuthMiddleware;
pub use rbac::{Role, Permission};

pub mod session;
pub mod session_middleware;

pub use session::{Session, SessionStore, InMemorySessionStore, RedisSessionStore, SessionManager};
pub use session_middleware::{SessionMiddleware, SessionLayer};

pub mod oauth2;
pub use oauth2::{OAuth2Client, OAuth2Config, ProviderConfig, OAuth2Provider};

pub mod authorization;
pub use authorization::{RequireRole, RequirePermission, AuthorizationService};

pub mod api_key;
pub mod api_key_middleware;
pub use api_key::ApiKey;
pub use api_key_middleware::ApiKeyMiddleware;

pub mod security;
pub use security::{email_verification, password_reset, two_factor};

use thiserror::Error;

#[derive(Error, Debug)]
pub enum AuthError {
    #[error("Invalid credentials")]
    InvalidCredentials,
    
    #[error("Token expired")]
    TokenExpired,
    
    #[error("Invalid token")]
    InvalidToken,
    
    #[error("Missing authorization header")]
    MissingHeader,
    
    #[error("Permission denied")]
    PermissionDenied,
    
    #[error("Hash error: {0}")]
    HashError(String),

    #[error("Token error: {0}")]
    TokenError(String),
    
    #[error("JWT error: {0}")]
    JwtError(#[from] jsonwebtoken::errors::Error),
}

pub type Result<T> = std::result::Result<T, AuthError>;