Crate ej_auth

Authentication utilities for the EJ framework.

Provides JWT tokens, password hashing, and content verification for EJ services.

Features

• JWT Tokens: Create and validate JSON Web Tokens
• Password Hashing: Secure Argon2-based password storage
• SHA-256: Content hashing for integrity checks
• Auth Responses: Standard Bearer token responses

Components

JWT (jwt)

Create and validate JWT tokens for service authentication.

Passwords (secret_hash)

Hash and verify passwords using Argon2.

Hashing (sha256)

SHA-256 hashing for content integrity.

Responses (auth_body)

Standard authentication response structures.

Examples

JWT Tokens

use ej_auth::jwt::{jwt_encode, jwt_decode};
use serde::{Serialize, Deserialize};
use std::env;
unsafe { env::set_var("JWT_SECRET", "MySuperSecret"); }

#[derive(Debug, PartialEq, Eq, Serialize, Deserialize)]
struct Claims {
    sub: String,
    exp: usize,
}

let claims = Claims {
    sub: "user-123".to_string(),
    exp: 4118335200,
};

let token = jwt_encode(&claims).unwrap();
let decoded = jwt_decode::<Claims>(&token).unwrap();
assert_eq!(claims, decoded.claims);

Password Hashing

use ej_auth::secret_hash::{generate_secret_hash, is_secret_valid};

let password = "my_password";
let hash = generate_secret_hash(password).unwrap();
let is_valid = is_secret_valid(password, &hash).unwrap();
assert!(is_valid);

Content Hashing

use ej_auth::sha256::generate_hash;

let content = "some data";
let hash = generate_hash(content);
assert_eq!(hash.len(), 64);

Security Notes

• Keep JWT secrets secure and rotate regularly
• Set appropriate token expiration times
• Store passwords as hashes only
• Use HTTPS for authentication

Configuration

Set JWT_SECRET environment variable for token signing.

Modules

auth_body

Authentication response structures.

error

Authentication error types.

jwt

JWT token management for the EJ authentication system.

prelude

Crate Prelude

secret_hash

Secure password hashing and verification using Argon2.

sha256

SHA-256 hashing for data integrity.

Constants

AUTH_HEADER

HTTP Authorization header name.

AUTH_HEADER_PREFIX

Bearer token prefix.

CONNECTION_TOKEN_TYPE

Token type for connection tokens.

ISS

JWT issuer identifier.