Crate klieo_auth_common 

Shared authentication primitives for klieo HTTP transports.

Authenticator is the server-side auth port. Both klieo-a2a and klieo-mcp-server consume it via Arc<dyn Authenticator>. Concrete implementations live in klieo-auth-oauth (JWT/JWKS) and here (AllowAnonymous, BearerTokenAuthenticator).

Structs

AllowAnonymous

TEST FIXTURE / DEMO ONLY. Allows every request through with Identity::anonymous.

BearerTokenAuthenticator

Bearer-token authenticator: validates Authorization: Bearer <token> against a caller-supplied verifier closure.

Identity

Verified caller identity returned by an Authenticator.

ScopeSet

Wrapper that gives HashSet<String> a deterministic Hash impl so the outer Identity can derive Hash without losing membership semantics.

Enums

AuthError

Failure cases for authentication.

Traits

Authenticator

Server-side authentication port.

Headers

Minimal read-only header bag used by Authenticator::authenticate.

Type Aliases

BearerVerifier

Closure type for verifying a raw bearer token. Returns the verified caller Identity on success.