systemprompt-oauth 0.35.0

OAuth 2.0 / OIDC with PKCE, token introspection, and audience/issuer validation for systemprompt.io AI governance infrastructure. WebAuthn and JWT auth for the MCP governance pipeline.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50

//! Persistence repositories backing the OAuth domain (clients, codes, tokens,
//! `WebAuthn` credentials).
//!
//! Copyright (c) systemprompt.io — Business Source License 1.1.
//! See <https://systemprompt.io> for licensing details.

pub mod bridge_host_prefs;
pub mod bridge_session;
pub mod client;
pub mod exchange_code;
pub mod oauth;
pub mod setup_token;
pub mod webauthn;

pub use bridge_host_prefs::BridgeHostPrefsRepository;
pub use bridge_session::{BridgeSessionRepository, BridgeSessionRow, UpsertBridgeSession};
pub use client::{
    ClientRepository, ClientSummary, ClientUsageSummary, CreateClientParams, UpdateClientParams,
};
pub use exchange_code::CreateExchangeCodeParams;
pub use oauth::{
    AuthCodeParams, AuthCodeValidationResult, JtiRevocationCache, OAuthRepository,
    RefreshTokenParams, StateBindingParams, StateBindingRow,
};
pub use setup_token::{
    CreateSetupTokenParams, SetupTokenPurpose, SetupTokenRecord, TokenValidationResult,
};
pub use webauthn::{WebAuthnCredential, WebAuthnCredentialParams};

use crate::error::OauthResult;
use systemprompt_database::DbPool;

/// Bundle of the OAuth-domain repositories, constructed once at a composition
/// root and cloned by consumers.
#[derive(Debug, Clone)]
pub struct OAuthRepositories {
    pub oauth: OAuthRepository,
    pub bridge_host_prefs: BridgeHostPrefsRepository,
    pub bridge_sessions: BridgeSessionRepository,
}

impl OAuthRepositories {
    pub fn new(db: &DbPool) -> OauthResult<Self> {
        Ok(Self {
            oauth: OAuthRepository::new(db)?,
            bridge_host_prefs: BridgeHostPrefsRepository::new(db)?,
            bridge_sessions: BridgeSessionRepository::new(db)?,
        })
    }
}