List of all items

Structs

• account_linking::AccountLinkResult
• account_linking::AccountRecord
• account_linking::InMemoryAccountStore
• account_linking::ProviderLink
• anonymous::AnonSignupResponse
• anonymous::AnonSignupState
• audit::chain::ChainHasher
• audit::logger::AuditEntry
• audit::logger::StructuredAuditLogger
• constant_time::ConstantTimeOps
• error_sanitizer::AuthErrorSanitizer
• error_sanitizer::SanitizedError
• handlers::AuthCallbackQuery
• handlers::AuthLogoutRequest
• handlers::AuthRefreshRequest
• handlers::AuthRefreshResponse
• handlers::AuthStartRequest
• handlers::AuthStartResponse
• handlers::AuthState
• jwks::JwksCache
• jwt::Claims
• jwt::JwtValidator
• middleware::AuthMiddleware
• middleware::AuthenticatedUser
• monitoring::AuthEvent
• monitoring::AuthMetrics
• monitoring::OperationTimer
• multi_provider::AuthTokenResponse
• multi_provider::AuthTokenResponseBuilder
• multi_provider::AuthorizeQuery
• multi_provider::CallbackQuery
• multi_provider::MultiProviderAuthState
• multi_provider::ProvidersResponse
• oauth::audit::OAuthAuditEvent
• oauth::client::AuthorizationRequest
• oauth::client::OAuth2Client
• oauth::client::OIDCClient
• oauth::client::OIDCProviderConfig
• oauth::failover::ProviderFailoverManager
• oauth::pkce::NonceParameter
• oauth::pkce::PKCEChallenge
• oauth::pkce::StateParameter
• oauth::provider::ExternalAuthProvider
• oauth::provider::OAuth2ClientConfig
• oauth::provider::OAuthSession
• oauth::provider::ProviderRegistry
• oauth::refresh::TokenRefreshScheduler
• oauth::refresh::TokenRefreshWorker
• oauth::types::IdTokenClaims
• oauth::types::TokenResponse
• oauth::types::UserInfo
• oidc_provider::OidcProvider
• oidc_server_client::OidcEndpoints
• oidc_server_client::OidcServerClient
• oidc_server_client::OidcTokenResponse
• operation_rbac::RBACPolicy
• operation_rbac::Role
• otp::InMemoryOtpStore
• otp::NoopEmailDelivery
• otp::OtpRequest
• otp::OtpResponse
• otp::OtpRouteState
• otp::VerifyRequest
• phone_otp::InMemorySmsSender
• phone_otp::SmsOtpAuthState
• phone_otp::SmsOtpRequest
• phone_otp::SmsOtpResponse
• phone_otp::SmsVerifyRequest
• phone_otp::SmsVerifyResponse
• pkce::ConsumedPkceState
• pkce::InMemoryPkceStateStore
• provider::PkceChallenge
• provider::TokenResponse
• provider::UserInfo
• providers::auth0::Auth0OAuth
• providers::auth0::Auth0Roles
• providers::auth0::Auth0User
• providers::azure_ad::AzureADOAuth
• providers::azure_ad::AzureADUser
• providers::github::GitHubOAuth
• providers::github::GitHubOrg
• providers::github::GitHubTeam
• providers::github::GitHubUser
• providers::google::GoogleOAuth
• providers::google::GoogleUser
• providers::google::GoogleWorkspaceGroup
• providers::keycloak::ClientRoles
• providers::keycloak::KeycloakOAuth
• providers::keycloak::KeycloakTokenClaims
• providers::keycloak::RealmAccess
• providers::logto::LogtoOAuth
• providers::okta::OktaGroups
• providers::okta::OktaOAuth
• providers::okta::OktaUser
• providers::ory::OryOAuth
• proxy::ProxyConfig
• rate_limiting::AuthRateLimitConfig
• rate_limiting::KeyedRateLimiter
• rate_limiting::RateLimiters
• rate_limiting::SystemClock
• security_config::AuditLoggingSettings
• security_config::ErrorSanitizationSettings
• security_config::RateLimitingSettings
• security_config::SecurityConfigFromSchema
• security_config::StateEncryptionSettings
• session::SessionData
• session::TokenPair
• session_postgres::PostgresSessionStore
• social::SocialAuthorizeParams
• social::SocialLoginState
• social::SocialProviderRegistry
• state_encryption::EncryptedState
• state_encryption::StateEncryption
• state_encryption::StateEncryptionConfig
• state_encryption::StateEncryptionService
• state_store::InMemoryStateStore
• totp_mfa::EnrollmentResponse
• totp_mfa::InMemoryMfaStore
• totp_mfa::MfaChallengeRequest
• totp_mfa::MfaChallengeResponse
• totp_mfa::MfaEnrollRequest
• totp_mfa::MfaEnrollResponse
• totp_mfa::MfaRouteState
• totp_mfa::MfaUnenrollRequest
• totp_mfa::MfaVerifyRequest
• totp_mfa::TotpEnrollment

Enums

• audit::chain::ChainVerifyError
• audit::logger::AuditEventType
• audit::logger::SecretType
• error::AuthError
• jwks::JwksError
• oauth::provider::ProviderType
• operation_rbac::OperationPermission
• pkce::PkceError
• pkce::PkceStateStore
• state_encryption::DecryptionError
• state_encryption::EncryptionAlgorithm
• state_encryption::KeyError

Traits

• account_linking::AccountStore
• audit::logger::AuditExt
• audit::logger::AuditLogger
• error_sanitizer::Sanitize
• oauth::refresh::TokenRefresher
• otp::EmailDelivery
• otp::OtpStore
• phone_otp::SmsSender
• provider::OAuthProvider
• rate_limiting::Clock
• session::SessionStore
• state_store::StateStore
• totp_mfa::MfaStore

Functions

• account_linking::normalize_email
• anonymous::anon_signup
• anonymous::upgrade_anonymous_session
• audit::chain::verify_chain
• audit::logger::get_audit_logger
• audit::logger::init_audit_logger
• handlers::auth_callback
• handlers::auth_logout
• handlers::auth_refresh
• handlers::auth_start
• handlers::generate_secure_state
• handlers::validate_auth_input_len
• jwt::extract_claim_string
• jwt::extract_name_string
• jwt::generate_hs256_token
• jwt::generate_rs256_token
• multi_provider::authorize
• multi_provider::callback
• multi_provider::list_providers
• otp::otp_send
• otp::otp_verify
• phone_otp::normalize_e164
• phone_otp::send_sms_otp
• phone_otp::verify_sms_otp
• providers::create_provider
• rate_limiting::warn_if_single_node_rate_limiting
• security_init::init_default_security_config
• security_init::init_security_config
• security_init::log_security_config
• security_init::validate_security_config
• session::generate_refresh_token
• session::hash_token
• session::unix_now
• social::social_authorize
• state_encryption::generate_state_encryption_key
• totp_mfa::mfa_challenge
• totp_mfa::mfa_enroll
• totp_mfa::mfa_unenroll
• totp_mfa::mfa_verify

Type Aliases

• error::Result

Statics

• audit::logger::AUDIT_LOGGER

Constants

• audit::logger::bounds::BYTES_PER_ENTRY
• audit::logger::bounds::MAX_CONTEXT_LEN
• audit::logger::bounds::MAX_ENTRIES_IN_MEMORY
• audit::logger::bounds::MAX_ERROR_MESSAGE_LEN
• audit::logger::bounds::MAX_OPERATION_LEN
• audit::logger::bounds::MAX_SUBJECT_LEN
• error_sanitizer::messages::AUTH_FAILED
• error_sanitizer::messages::INVALID_SIGNATURE
• error_sanitizer::messages::INVALID_STATE
• error_sanitizer::messages::PERMISSION_DENIED
• error_sanitizer::messages::REQUEST_FAILED
• error_sanitizer::messages::SERVICE_UNAVAILABLE
• error_sanitizer::messages::SESSION_EXPIRED
• error_sanitizer::messages::SESSION_REVOKED
• error_sanitizer::messages::TOKEN_EXPIRED
• handlers::MAX_AUTH_CODE_BYTES
• handlers::MAX_REFRESH_TOKEN_BYTES
• handlers::MAX_STATE_BYTES
• jwt::MAX_CLOCK_SKEW_SECS
• jwt::MAX_TOKEN_AGE_SECS
• jwt::REQUIRE_AUD
• oauth::client::ALLOWED_OIDC_ALGORITHMS
• oauth::client::FORBIDDEN_KEY_INJECTION_HEADERS
• oauth::client::FORBIDDEN_OIDC_ALGORITHMS
• oauth::client::REQUIRED_JWT_TYP