systemprompt-oauth 0.3.1

OAuth 2.0 / OIDC with PKCE, token introspection, and audience/issuer validation for systemprompt.io AI governance infrastructure. WebAuthn and JWT auth for the MCP governance pipeline.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19

use systemprompt_models::auth::JwtAudience;

pub fn validate_service_access(token_audiences: &[JwtAudience], _service_name: &str) -> bool {
    const GLOBAL: &[JwtAudience] = &[
        JwtAudience::Api,
        JwtAudience::Mcp,
        JwtAudience::A2a,
        JwtAudience::Web,
    ];
    GLOBAL.iter().any(|aud| token_audiences.contains(aud))
}

pub fn validate_required_audience(token_audiences: &[JwtAudience], required: &JwtAudience) -> bool {
    token_audiences.contains(required)
}

pub fn validate_any_audience(token_audiences: &[JwtAudience], allowed: &[JwtAudience]) -> bool {
    allowed.iter().any(|aud| token_audiences.contains(aud))
}