Enum AuthConfig 

pub enum AuthConfig {
    Jwt {
        secret: String,
    },
    SharedSecret {
        token: String,
    },
    Dual {
        jwt_secret: String,
        shared_token: String,
    },
    External,
}

Authentication configuration supporting JWT, shared-secret, or both.

Variants

Jwt

Pure JWT mode – validate/issue using HMAC-SHA256.

Fields

secret: String

SharedSecret

Legacy shared-secret mode – simple string comparison.

Fields

token: String

Dual

Dual mode – try JWT first, fall back to shared secret.

Fields

jwt_secret: String

shared_token: String

External

External mode – an outer authentication layer (e.g. a tonic interceptor) has already validated the token. The raw token value is passed through as the agent id. Useful for managed platforms where a gateway handles JWT verification before the request reaches the protocol server.

Implementations

impl AuthConfig

pub fn validate(&self, token: &str) -> Result<String, Status>

Validate an incoming bearer token.

Returns the agent id on success:

• JWT modes: the sub claim from the decoded token.
• SharedSecret mode: the literal "anonymous".

Empty tokens are always rejected regardless of auth mode.

pub fn validate_claims(&self, token: &str) -> Option<DkodClaims>

Fully validate a bearer token and return the complete DkodClaims.

Unlike [validate], which returns only the agent id, this method returns the entire validated claims struct so callers can inspect fields such as scope without an additional insecure decode pass.

Returns None for non-JWT auth modes (SharedSecret / External) where no claims struct exists.

pub fn issue_token( &self, agent_id: &str, scope: &str, ttl_secs: usize, ) -> Result<String, Status>

Issue a new JWT for the given agent.

Only available when a JWT secret is configured (Jwt or Dual mode). Returns Status::failed_precondition if called in SharedSecret-only mode.

Trait Implementations

impl Clone for AuthConfig

fn clone(&self) -> AuthConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuthConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.