Struct IjimaAuth 

pub struct IjimaAuth { /* private fields */ }

Ijima’s auth core: an AccessController (authz) plus a capability token issuer and verifier (authn) sharing one Ed25519 key.

A daemon constructs one of these at startup; an admin CLI uses the issuer to mint tokens via IjimaAuth::issue_bearer.

Implementations

impl IjimaAuth

pub fn from_embedded_policy() -> Result<Self>

Loads the embedded policy/policy.toml and generates a fresh Ed25519 issuer key pair.

Use only for tests/ephemeral runs — every call produces a new key, so issued tokens will not verify against a different instance. For a persistent daemon/CLI, use from_embedded_policy_with_seed with a seed from key_store.

Errors

Returns IjimaError::InvalidInput if the policy TOML is invalid.

pub fn from_embedded_policy_with_seed(seed: [u8; 32]) -> Result<Self>

Loads the embedded policy and constructs the issuer from a known 32-byte Ed25519 seed. The same seed must be shared by every process that issues or verifies tokens for this Ijima instance.

Errors

Returns IjimaError::InvalidInput if the policy TOML is invalid.

pub fn generate_seed() -> [u8; 32]

Generates a fresh random 32-byte issuer seed (for first-time setup).

pub fn issuer_public_key_hex(&self) -> String

The issuer’s Ed25519 public key as lowercase hex, for distribution to verifiers and operator visibility.

pub fn grassmannian(&self) -> (usize, usize)

Returns the Grassmannian the controller operates on.

pub fn issue_bearer( &self, principal: impl Into<PrincipalId>, capability: impl AsRef<str>, ) -> Result<String>

Issues a bearer token (base64 wire format) granting capability to principal.

Errors

Returns IjimaError::InvalidInput if Schubert’s issuer rejects the inputs.

pub fn verify_bearer(&self, bearer: &str) -> Result<AuthenticatedPrincipal>

Decodes + cryptographically verifies a bearer token, returning the authenticated principal and the capability the token grants.

Errors

Returns IjimaError::InvalidInput on a malformed or bad-signature token.

pub fn check( &self, principal: &PrincipalId, required: &[&str], ) -> Result<AccessDecision>

Authorizes principal for required capabilities via the geometric Schubert check. Returns the AccessDecision.

This is the authorization half; combine with [verify_bearer] in handlers that need both (“who is calling” + “may they do this”).

pub fn require( &self, bearer: &str, required: &str, ) -> Result<AuthenticatedPrincipal>

Convenience guard for handlers: verifies the token (authn) and authorizes via proof-carrying semantics — the token’s capability field is the authorization, verified cryptographically against the issuer’s public key. Succeeds when the token grants exactly required or grants ADMIN (the point class implies every capability).

For richer geometric implication (e.g. “mining:trigger composes over session:ingest”), use check against a controller with explicit grants — that path is for offline policy analysis, not per-request runtime checks.

Errors

Returns an error if the token is invalid or does not grant required.

Trait Implementations

impl Debug for IjimaAuth

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.