Struct LocalAuthConfig 

pub struct LocalAuthConfig {
    pub password: bool,
    pub otp: bool,
    pub mfa: bool,
    pub anonymous: bool,
    pub email_verification: bool,
    pub mfa_issuer: Option<String>,
    pub email_from: Option<String>,
    pub reset_url_template: Option<String>,
    pub magic_link_template: Option<String>,
    pub verification_url_template: Option<String>,
}

[auth.local] — the auth methods FraiseQL operates itself, rather than delegating to an IdP (#367).

Every enabled method mounts real HTTP routes and requires a database pool: credentials, MFA enrollments, OTP budgets and sessions are all durable state. A method enabled without what it needs refuses to boot rather than mounting a flow that cannot complete.

Fields

password: bool

Email + password sign-in: mounts /auth/v1/password/{signup,login} and the reset pair. Reset-link delivery additionally requires email_from.

otp: bool

Email OTP / magic-link sign-in: mounts /auth/v1/otp and /auth/v1/verify. Requires email_from — a code nobody receives is not a login method.

mfa: bool

TOTP MFA: mounts /auth/v1/mfa/{enroll,challenge,verify,unenroll}, backed by the Postgres enrollment store (enrollments must survive a restart, or a deploy locks every user out of their own account).

anonymous: bool

Anonymous guest sessions: mounts POST /auth/v1/signup, which issues a session to any caller with no credentials at all. Off by default — this is a deliberate “anyone may hold a session” posture, not a convenience.

email_verification: bool

Email verification for local-password accounts (#945): mounts POST /auth/v1/email/verify/{start,confirm}, both of which require an authenticated caller and act only on that caller’s own account.

Requires password — verification proves the address a local identity claims, and an account without one has nothing to verify — plus email_from and verification_url_template.

Confirming promotes the account’s own core.tb_user.email, which is what lets a later trusted social sign-in for the same address link into it. It never merges two accounts: an address already verified elsewhere is refused.

mfa_issuer: Option<String>

Service name shown in authenticator apps for MFA enrollment (otpauth://…?issuer=). Defaults to "FraiseQL".

email_from: Option<String>

The [mailbox.<name>] account whose SMTP half delivers OTP codes and password-reset links. Required whenever otp or password is enabled; naming a mailbox with no [mailbox.<name>.smtp] section refuses to boot.

reset_url_template: Option<String>

Template for the password-reset link, with {token} substituted for the opaque reset token — e.g. https://app.example.com/reset?token={token}. Required when password is enabled: the link points at the operator’s front end, which FraiseQL cannot guess.

magic_link_template: Option<String>

Template for the OTP magic link, with {code} substituted. Optional: when absent the email carries the bare six-digit code.

verification_url_template: Option<String>

Template for the email-verification link, with {token} substituted for the opaque verification token — e.g. https://app.example.com/verify-email?token={token}. Required when email_verification is enabled: the link points at the operator’s front end, which FraiseQL cannot guess.

Trait Implementations

impl Clone for LocalAuthConfig

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for LocalAuthConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for LocalAuthConfig

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for LocalAuthConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for LocalAuthConfig

impl PartialEq for LocalAuthConfig

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for LocalAuthConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for LocalAuthConfig