1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
use anyhow::{Result, bail};
/// Auth trait for validating tool handshake requests.
#[async_trait::async_trait]
pub trait Auth<A>: Send + Sync {
/// Validates a credential string from a handshake request.
///
/// Returns an `auth_info` that can be consumed by `MetadataMgr`
/// to derive route/tool selection metadata.
async fn authenticate(&self, credential: &str) -> Result<A>;
}
/// Default auth implementation based on optional shared token.
pub struct AuthImpl {
auth_token: Option<String>,
}
impl AuthImpl {
/// Creates the default token-based authenticator.
///
/// When `auth_token` is `None`, authentication is effectively disabled.
pub fn new(auth_token: Option<String>) -> Self {
Self { auth_token }
}
}
#[async_trait::async_trait]
impl Auth<()> for AuthImpl {
async fn authenticate(&self, credential: &str) -> Result<()> {
if let Some(token) = &self.auth_token {
if &credential != token {
bail!("invalid credential");
}
}
Ok(())
}
}