velocia 0.3.5

velocia – production-ready AI agent framework using ADK-Rust, A2A protocol, and AWS DynamoDB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49

use serde::{Deserialize, Serialize};
use std::collections::HashMap;

#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize, Default)]
#[serde(rename_all = "lowercase")]
pub enum AuthType {
    #[default]
    NoAuth,
    Cognito,
}

/// Security-scheme definition (mirrors OpenAPI `SecurityScheme`).
#[derive(Debug, Clone, Serialize, Deserialize)]
pub struct SecurityScheme {
    #[serde(rename = "type")]
    pub scheme_type: String,
    /// For OAuth2/OIDC: the JWKS endpoint URL.
    pub description: Option<String>,
    pub flows: Option<serde_json::Value>,
    #[serde(flatten)]
    pub extra: HashMap<String, serde_json::Value>,
}

/// Authentication configuration used on both server (middleware) and client
/// (outbound credential service) sides.
#[derive(Debug, Clone, Default, Serialize, Deserialize)]
#[serde(rename_all = "camelCase")]
pub struct AuthConfig {
    pub security_schemes: Option<HashMap<String, SecurityScheme>>,
    /// OpenAPI-style security requirement list, e.g. `[{"oauth": ["read"]}]`.
    pub security: Option<Vec<HashMap<String, Vec<String>>>>,
    #[serde(default)]
    pub auth_type: AuthType,
}

impl AuthConfig {
    /// Returns the first security scheme name and its required scopes.
    pub fn first_scheme(&self) -> Option<(String, Vec<String>)> {
        self.security
            .as_ref()?
            .first()
            .and_then(|req| req.iter().next())
            .map(|(k, v)| (k.clone(), v.clone()))
    }

    pub fn is_no_auth(&self) -> bool {
        self.auth_type == AuthType::NoAuth
    }
}