Struct BearerAuthLayer 

pub struct BearerAuthLayer<Sess, P>
where
    Sess: Clone + Send + Sync + 'static,
    P: AuthProvider<Sess> + 'static + ?Sized,
{ /* private fields */ }

Tower Layer mounting the perimeter authentication boundary.

Wrap an axum router with .layer(BearerAuthLayer::new(provider, config)). Mount at HTTP-edge granularity, not per-route — every authenticated transport should sit behind this layer. Routes that need anonymous access (health endpoints, the OIDC RP sub-router itself, public landing pages) stay outside.

Two generic parameters:

• Sess — the consumer’s perimeter session type. Whatever AuthProvider::verify_token returns lands in req.extensions() for handlers to read via req.extensions().get::<Sess>().
• P: ?Sized — the AuthProvider impl. Both concrete types (Arc<MyProvider>) and trait objects (Arc<dyn AuthProvider<Sess>>) are supported.

Implementations

impl<Sess, P> BearerAuthLayer<Sess, P>

where Sess: Clone + Send + Sync + 'static, P: AuthProvider<Sess> + 'static + ?Sized,

pub fn new( provider: Arc<P>, config: BearerAuthConfig, ) -> BearerAuthLayer<Sess, P>

Build the Layer from an AuthProvider handle and a BearerAuthConfig. Production wiring at app boot looks like:

let provider: Arc<dyn AuthProvider<MySession>> =
    Arc::new(MyConcreteProvider::new(verifier, db_pool));
let layer = BearerAuthLayer::new(
    provider,
    BearerAuthConfig::new(
        my_cookies::ACCESS_COOKIE,
        Arc::new(|jar| my_cookies::clear_session_cookies(jar)),
        [].into(), // path_exempt — exempt nothing (fail-closed default)
    ),
);
app.layer(layer)

Trait Implementations

impl<Sess, P> Clone for BearerAuthLayer<Sess, P>

where Sess: Clone + Send + Sync + 'static, P: AuthProvider<Sess> + 'static + ?Sized,

fn clone(&self) -> BearerAuthLayer<Sess, P>

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<Inner, Sess, P> Layer<Inner> for BearerAuthLayer<Sess, P>

where Sess: Clone + Send + Sync + 'static, P: AuthProvider<Sess> + 'static + ?Sized,

type Service = BearerAuthService<Inner, Sess, P>

The wrapped service

fn layer( &self, inner: Inner, ) -> <BearerAuthLayer<Sess, P> as Layer<Inner>>::Service

Wrap the given service with the middleware, returning a new service that has been decorated with the middleware.