tf-decide-client 0.1.3

TrustForge middleware for Decide client. Provides drop-in zero-trust request verification, capability delegation, and policy enforcement for Decide client servers.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36

# tf-decide-client

Tiny shared HTTP client used by every `tf-*` framework adapter (axum, tonic,
actix-web, rocket, warp, poem, salvo, hyper) to call `tf-daemon`'s
`/v1/decide` endpoint.

## Why it exists

Without a shared crate, every adapter would re-define `DecideRequest` /
`DecideResponse` and re-implement bearer-token auth + JSON encode + error
classification. By extracting one client we keep the adapters small and
guarantee they all agree on the wire format.

## Usage

```rust
use tf_decide_client::{TfDecideClient, DecideRequest};

#[tokio::main]
async fn main() {
    let client = TfDecideClient::new("http://127.0.0.1:7080", "admin-token");
    let resp = client
        .decide(&DecideRequest {
            action: "GET /api/widgets".into(),
            ..Default::default()
        })
        .await
        .unwrap();
    println!("decision={} reason={}", resp.decision, resp.reason);
}
```

## Status

Draft / experimental — wire format follows `TF-0007` decide-API draft and may
shift before 1.0.