securitydept-token-set-context 0.2.0

Token Set Context of SecurityDept, a layered authentication and authorization toolkit built as reusable Rust crates.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74

//! Shared access-token substrate — cross-mode runtime infrastructure.
//!
//! This module **owns** capabilities that depend only on a verified access
//! token and `X-SecurityDept-Propagation`, regardless of which OIDC mode
//! originally produced the token.
//!
//! # Capability axes
//!
//! - **`token_propagation`** — `disabled` vs `enabled` (downstream bearer
//!   propagation substrate)
//!
//! # Submodules
//!
//! | Submodule | Description |
//! |---|---|
//! | [`capabilities`] | Substrate capability axes (`TokenPropagation`) |
//! | [`config`] | `AccessTokenSubstrateConfig` |
//! | [`runtime`] | `AccessTokenSubstrateRuntime` — single authority for substrate runtime objects |
//! | [`propagation`] | Destination-policy gated bearer propagation |
//! | [`forwarder`] | Propagation forwarder traits (`PropagationForwarderConfigSource`, `PropagationForwarder`, `PropagationForwarderError`) + axum reverse-proxy forwarder (feature-gated) |
//!
//! # Resource-server types
//!
//! Key resource-server types from `securitydept-oauth-resource-server` are
//! re-exported here so adopters do not need a direct dependency:
//!
//! - [`ResourceTokenPrincipal`]
//! - [`VerifiedAccessToken`], [`VerifiedToken`]
//! - [`VerificationPolicy`]
//! - [`OAuthResourceServerVerifier`]

// --- Own submodules (physically live here) ---

pub mod capabilities;
pub mod config;
pub(crate) mod forwarder;
pub(crate) mod propagation;
pub mod runtime;
mod service;

// --- Capabilities public re-exports ---
pub use capabilities::{TokenPropagation, TokenPropagationKind};
// --- Config public re-exports ---
pub use config::{
    AccessTokenSubstrateConfig, AccessTokenSubstrateConfigSource,
    ResolvedAccessTokenSubstrateConfig,
};
// --- Axum concrete forwarder re-exports (feature-gated) ---
#[cfg(feature = "axum-reverse-proxy-propagation-forwarder")]
pub use forwarder::{
    AxumReverseProxyPropagationForwarder, AxumReverseProxyPropagationForwarderConfig,
};
// --- Forwarder trait + error re-exports (always available) ---
pub use forwarder::{
    PropagationForwarder, PropagationForwarderConfigSource, PropagationForwarderError,
    PropagationForwarderResult,
};
// --- Propagation public re-exports ---
pub use propagation::{
    AllowedPropagationTarget, BearerPropagationPolicy, DEFAULT_PROPAGATION_HEADER_NAME,
    PropagatedBearer, PropagatedTokenValidationConfig, PropagationDestinationPolicy,
    PropagationDirective, PropagationNodeTargetResolver, PropagationRequestTarget,
    PropagationScheme, TokenPropagator, TokenPropagatorConfig, TokenPropagatorError,
    TokenPropagatorResult,
};
// --- Runtime public re-exports ---
pub use runtime::{AccessTokenSubstrateRuntime, AccessTokenSubstrateRuntimeError};
// --- Resource-server re-exports ---
pub use securitydept_oauth_resource_server::{
    OAuthResourceServerVerifier, ResourceTokenPrincipal, VerificationPolicy, VerifiedAccessToken,
    VerifiedToken,
};
// --- Service public re-exports ---
pub use service::{AccessTokenSubstrateResourceService, AccessTokenSubstrateResourceServiceError};