Module auth 

Authentication primitives: password hashing, TOTP, recovery codes, session / challenge / nonce lifecycle.

The full per-request signature pipeline (verify_signed_request) lives at the bottom of this file; Phase 6 plugs it into an axum middleware. Mirrors python/.../server/auth.py.

Structs

IssuedChallenge

Session

Enums

AuthError

Functions

consume_challenge

consume_nonce

consume_recovery_code

generate_recovery_codes

generate_totp_secret

hash_password

issue_challenge

issue_session

lookup_session

purge_expired_nonces

revoke_session

verify_password

verify_signed_request

verify_totp