ppoppo-sdk-core 0.2.0

Internal shared primitives for the Ppoppo SDK family (pas-external, pas-plims, pcs-external) — verifier port, audit trait, session liveness port, OIDC discovery, perimeter Bearer-auth Layer kit, identity types. Not a stable public API; do not depend on this crate directly. Consume the SDK crates that re-export from it (e.g. `pas-external`).
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50

//! γ port-and-adapter SDK boundary for bearer-token verification.
//!
//! Phase 6.1 — D-04 = γ (locked 2026-05-05). Phase A
//! (RFC `RFC_2026-05-08_app-credential-collapse.md`, audit decision E)
//! lifted the cohesive group from `pas_external::token::*` to here so
//! multiple SDK crates and 1st-party services share one definition.
//!
//! The SDK exposes a [`BearerVerifier`] trait + [`VerifiedClaims`]
//! result, hiding the engine ([`ppoppo_token`]), the token format (JWT,
//! RFC 9068), and the JWKS substrate behind a single async port.
//! External Developer apps inject `Arc<dyn BearerVerifier>` into their
//! middleware and never see `jsonwebtoken::*` types.
//!
//! Module layout (cohesive group, audit decision E):
//!
//! - [`port`] — `BearerVerifier` trait
//! - [`claims`] — `VerifiedClaims` (was `AuthSession` — audit decision G)
//! - [`config`] — `VerifyConfig` (was `Expectations` — audit decision G)
//! - [`error`] — `VerifyError` crypto-side enum
//! - [`jwks_cache`] — `JwksCache` (visibility lifted to `pub` in Phase A)
//! - [`jwt`] — `JwtVerifier` production adapter (was `PasJwtVerifier` — audit decision G)
//! - [`memory`] — `MemoryBearerVerifier` test-support adapter

pub mod claims;
pub mod config;
pub mod error;
pub mod port;

#[cfg(feature = "well-known-fetch")]
pub mod jwks_cache;

#[cfg(feature = "well-known-fetch")]
pub mod jwt;

#[cfg(any(test, feature = "test-support"))]
pub mod memory;

pub use claims::VerifiedClaims;
pub use config::VerifyConfig;
pub use error::VerifyError;
pub use port::BearerVerifier;

#[cfg(feature = "well-known-fetch")]
pub use jwks_cache::JwksCache;

#[cfg(feature = "well-known-fetch")]
pub use jwt::JwtVerifier;

#[cfg(any(test, feature = "test-support"))]
pub use memory::MemoryBearerVerifier;