Struct AuthMiddleware 

pub struct AuthMiddleware { /* private fields */ }

Authentication Middleware

Validates incoming requests for authentication requirements. Acts as the second layer in the security middleware pipeline.

Implementations

impl AuthMiddleware

pub fn from_config(config: AuthConfig) -> Self

Create a new authentication middleware from configuration.

Emits a warning when required = true but no signing key is configured, because JWT signature verification will be disabled in that case.

pub fn permissive() -> Self

Create middleware with permissive settings (authentication optional)

pub fn standard() -> Self

Create middleware with standard settings (authentication required)

pub fn strict() -> Self

Create middleware with strict settings (authentication required, short expiry)

pub fn validate_request( &self, req: &AuthRequest, ) -> Result<AuthenticatedUser, SecurityError>

Validate authentication in a request.

Performs validation checks in order:

1. Extract token from Authorization header
2. Validate token signature (if signing key configured)
3. Check token expiry (exp claim)
4. Validate issuer/audience claims (if configured)
5. Extract required claims (sub)
6. Extract optional claims (scope, aud, iss)

Errors

Returns SecurityError::AuthRequired if no Authorization header or token is missing. Returns SecurityError::InvalidToken if the token signature, expiry, issuer, or audience is invalid. Returns SecurityError::TokenMissingClaim if a required claim is absent.

pub const fn config(&self) -> &AuthConfig

Get the underlying configuration

Trait Implementations

impl Clone for AuthMiddleware

fn clone(&self) -> AuthMiddleware

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuthMiddleware

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.