systemprompt-api 0.67.0

Axum-based HTTP server and API gateway for systemprompt.io AI governance infrastructure. Exposes governed agents, MCP, A2A, and admin endpoints with rate limiting and RBAC.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73

//! Generic browser-redirect SSO routes, mounted at [`SSO_BASE`].
//!
//! Every registered provider is reachable as `/{id}/start`, `/{id}/callback`
//! (query or form-POST return) and `/{id}/metadata`; the protocol itself is
//! the provider's and the flow is the
//! [`systemprompt_oauth_issuance::sso::SsoDriver`]'s. A deployment
//! that registered its identity provider with other paths aliases them onto
//! the same handlers via [`into_response`].
//!
//! Copyright (c) systemprompt.io — Business Source License 1.1.
//! See <https://systemprompt.io> for licensing details.

mod callback;
mod metadata;
mod respond;
mod start;

use std::sync::Arc;

use axum::Router;
use axum::routing::get;
use systemprompt_oauth::OAuthState;
use systemprompt_oauth::services::SessionCreationService;
use systemprompt_oauth_issuance::sso::SsoDriver;
use systemprompt_runtime::AppContext;
use systemprompt_traits::AnalyticsProvider;

pub use respond::{binder_from_headers, into_response, start_response};

pub const SSO_BASE: &str = "/api/v1/core/sso";

#[derive(Clone)]
pub struct SsoRouteState {
    pub driver: SsoDriver,
    pub analytics: Arc<dyn AnalyticsProvider>,
}

impl std::fmt::Debug for SsoRouteState {
    fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
        f.debug_struct("SsoRouteState")
            .field("driver", &self.driver)
            .finish_non_exhaustive()
    }
}

impl SsoRouteState {
    pub fn build(ctx: &AppContext, oauth: &OAuthState) -> Self {
        let session_service = SessionCreationService::new(
            Arc::clone(oauth.session_provider()),
            Arc::clone(oauth.user_provider()),
        );
        let driver = SsoDriver::discover(
            ctx.db_pool(),
            Arc::new(session_service),
            Arc::new(ctx.config().clone()),
        );
        Self {
            driver,
            analytics: Arc::clone(oauth.analytics_provider()),
        }
    }
}

pub fn router(state: SsoRouteState) -> Router {
    Router::new()
        .route("/{id}/start", get(start::handle_start))
        .route(
            "/{id}/callback",
            get(callback::handle_callback_query).post(callback::handle_callback_form),
        )
        .route("/{id}/metadata", get(metadata::handle_metadata))
        .with_state(state)
}