rskit-auth 0.2.0-alpha.1

JWT, OIDC, password hashing, and request-context auth helpers
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45

//! Authentication — password hashing, API key management, request-context helpers,
//! and optional JWT/OIDC support.
//!
//! Request middleware is fail-closed by default. [`BearerAuthLayer`] reads only
//! `Authorization: Bearer ...` headers and emits a neutral
//! `WWW-Authenticate: Bearer` challenge on rejected requests; applications can
//! add realm/scope-specific challenge policy at their HTTP boundary if needed.

#![warn(missing_docs)]

/// API key generation, hashing, validation, and rotation with grace periods.
pub mod apikey;
/// Header-only bearer authentication middleware.
mod bearer;
/// Auth claims stored in request extensions / task-locals.
pub mod context;
/// JWT sign/verify service.
#[cfg(feature = "jwt")]
pub mod jwt;
/// OpenID Connect (OIDC) support — discovery, token validation, userinfo.
#[cfg(feature = "oidc")]
pub mod oidc;
/// Typed request authentication outcomes.
pub mod outcome;
/// Password hashing and reset-token generation.
pub mod password;
/// Core `TokenValidator` and `TokenGenerator` traits.
pub mod traits;

pub use bearer::{BearerAuthLayer, BearerAuthService};
pub use context::AuthClaims;
#[cfg(feature = "jwt")]
pub use jwt::{
    AsymmetricAlgorithm, JwtAlgorithm, JwtCodec, JwtConfig, JwtHeader, JwtKeyMaterial, JwtService,
    KeyPair,
};
#[cfg(feature = "oidc")]
pub use oidc::{
    OidcAuthorizationRequest, OidcClaims, OidcClient, OidcClientType, OidcConfig, OidcError,
    OidcHttpClient, OidcProviderMetadata, OidcTokenExchangeRequest, OidcUserInfo, PkcePair,
    ReqwestOidcHttpClient, validate_id_token,
};
pub use outcome::{AuthOutcome, MissingCredentialPolicy};
pub use password::{HashAlgorithm, PasswordHasher, ResetTokenGenerator};
pub use traits::{TokenGenerator, TokenValidator};