secrets-core 1.1.0

Core traits and primitives for the secrets server: storage/engine/auth traits, tokens, policies, leases, and the AES-256-GCM encryption barrier.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39

use async_trait::async_trait;
use thiserror::Error;

use crate::storage::StorageBackend;

#[derive(Debug, Error)]
pub enum AuthError {
    #[error("invalid credentials")]
    InvalidCredentials,
    #[error("invalid request: {0}")]
    InvalidRequest(String),
    #[error("storage error: {0}")]
    Storage(#[from] crate::storage::StorageError),
    #[error("auth error: {0}")]
    Other(String),
}

pub type AuthResult<T> = Result<T, AuthError>;

pub enum LoginRequest {
    UserPass { username: String, password: String },
    OidcAuthCodeCallback { code: String, state: String },
    OidcBearerJwt { jwt: String },
}

pub struct AuthOutcome {
    pub policies: Vec<String>,
    pub display_name: String,
    pub ttl_seconds: Option<i64>,
}

#[async_trait]
pub trait AuthMethod: Send + Sync {
    async fn login(
        &self,
        storage: &dyn StorageBackend,
        request: LoginRequest,
    ) -> AuthResult<AuthOutcome>;
}