//! Authentication primitives.
//!
//! Two complementary flows live here:
//!
//! - **Session-based OIDC** for browser users: login / callback /
//! logout handlers, the [`require_auth`] middleware, and provider
//! discovery. Handlers take `State<Option<Arc<CoreClient>>>` so
//! they are decoupled from the downstream project's `AppState`.
//! - **JWT bearer tokens** for service / automation callers: see
//! [`jwt`] for [`jwt::build_decoder`], [`jwt::ServiceClaims`], and
//! re-exports of the `axum-jwt-auth` extractor.
pub use ;
pub use ;
pub use ;
pub use ;