Struct AuthConfig 

pub struct AuthConfig {
    pub bearer_tokens: Vec<String>,
    pub jwks_url: Option<String>,
    pub issuer: Option<String>,
    pub audience: Option<String>,
    pub user_id_claim: Option<String>,
    pub tenant_id_claim: Option<String>,
    pub roles_claim: Option<String>,
    pub token_exchange: Option<TokenExchangeConfig>,
}

HTTP API authentication configuration for the daemon.

Fields

bearer_tokens: Vec<String>

Bearer tokens that grant API access. Multiple tokens support key rotation.

jwks_url: Option<String>

JWKS endpoint URL for JWT signature verification (e.g. "https://idp.example.com/.well-known/jwks.json").

issuer: Option<String>

Expected JWT issuer (iss claim). Validated when present.

audience: Option<String>

Expected JWT audience (aud claim). Validated when present.

user_id_claim: Option<String>

JWT claim to extract user ID from. Defaults to "sub".

tenant_id_claim: Option<String>

JWT claim to extract tenant ID from. Defaults to "tid".

roles_claim: Option<String>

JWT claim to extract roles from. Defaults to "roles".

token_exchange: Option<TokenExchangeConfig>

RFC 8693 Token Exchange configuration for per-user MCP auth delegation. When configured, the daemon exchanges user JWTs for MCP-scoped delegated tokens.

Trait Implementations

impl Clone for AuthConfig

fn clone(&self) -> AuthConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuthConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for AuthConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.