Struct StaticAuthProvider 

pub struct StaticAuthProvider { /* private fields */ }

Static bearer-token auth provider, suitable for dev and tests.

Validates that incoming Authorization headers match exactly one configured bearer token. Returns Some(AuthContext) with subject = "static-bearer" on match, an Err(ErrorCode::INVALID_REQUEST) on token mismatch, and an Err(ErrorCode::INVALID_REQUEST) on missing header (because AuthProvider::is_required defaults to true).

Example

use pmcp_server_toolkit::auth::StaticAuthProvider;
let provider = StaticAuthProvider::new("dev-token-do-not-use-in-prod");

Security note

Token comparison uses [constant_time_eq] semantics via byte-wise XOR accumulation to avoid timing-side-channel leaks during dev/test use. Production callers should use pmcp’s OAuth2 + JWT validator pipeline instead.

Implementations

impl StaticAuthProvider

pub fn new(expected_token: impl Into<String>) -> Self

Create a new StaticAuthProvider that accepts exactly one bearer token.

Example

use pmcp_server_toolkit::auth::StaticAuthProvider;
let provider = StaticAuthProvider::new("dev-token");

Trait Implementations

impl AuthProvider for StaticAuthProvider

fn validate_request<'life0, 'life1, 'async_trait>( &'life0 self, authorization_header: Option<&'life1 str>, ) -> Pin<Box<dyn Future<Output = Result<Option<AuthContext>>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Validate an incoming request and extract authentication context.

fn auth_scheme(&self) -> &'static str

Get the authentication scheme this provider uses (e.g., “Bearer”, “Basic”).

fn is_required(&self) -> bool

Check if this provider requires authentication for all requests.