Enum AuthConfig 

pub enum AuthConfig {
    Jwt {
        secret: String,
    },
    SharedSecret {
        token: String,
    },
    Dual {
        jwt_secret: String,
        shared_token: String,
    },
    External,
}

Authentication configuration supporting JWT, shared-secret, or both.

Variants

Jwt

Pure JWT mode – validate/issue using HMAC-SHA256.

Fields

secret: String

SharedSecret

Legacy shared-secret mode – simple string comparison.

Fields

token: String

Dual

Dual mode – try JWT first, fall back to shared secret.

Fields

jwt_secret: String

shared_token: String

External

External mode – an outer authentication layer (e.g. a tonic interceptor) has already validated the token. The raw token value is passed through as the agent id. Useful for managed platforms where a gateway handles JWT verification before the request reaches the protocol server.

Implementations

impl AuthConfig

pub fn validate(&self, token: &str) -> Result<String, Status>

Validate an incoming bearer token.

Returns the agent id on success:

• JWT modes: the sub claim from the decoded token.
• SharedSecret mode: the literal "anonymous".

Empty tokens are always rejected regardless of auth mode.

pub fn issue_token( &self, agent_id: &str, scope: &str, ttl_secs: usize, ) -> Result<String, Status>

Issue a new JWT for the given agent.

Only available when a JWT secret is configured (Jwt or Dual mode). Returns Status::failed_precondition if called in SharedSecret-only mode.

Trait Implementations

impl Clone for AuthConfig

fn clone(&self) -> AuthConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuthConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.