Crate sofie_auth 

Signing and sealing: sessions sealed into a cookie with no server store, signed links and tokens.

Structs

Acting

BearerToken

Shown once when issued; only its digest is stored.

SessionClaims

SigningKeys

The first key seals and signs, every key opens: rotate by putting the successor first.

Enums

OpenError

Signed

Each purpose signs with its own derived key, so one purpose’s signature never passes for another’s.

TokenRefused

Constants

OLD_SIGNING_KEYS

Read until apps move to SOFIE_SIGNING_KEYS; sofie::run warns while it is in use.

SIGNING_KEYS

Functions

digest

Each part is length-prefixed, so moving bytes between parts changes the digest.