Struct AuthService 

pub struct AuthService(/* private fields */);

Shared authentication service.

Coordinates between the identity catalog, authentication providers, and token/challenge stores. All transports and embedded mode call through this single service.

Cheap to clone — uses Arc internally.

Implementations

impl AuthService

pub fn authenticate( &self, method: &str, credentials: HashMap<String, String>, ) -> Result<AuthResponse, Error>

Authenticate an identity with the given method and credentials.

For single-step methods (password, token), returns Authenticated or Failed. For challenge-response methods, may return Challenge first, then Authenticated on the second call with the challenge response.

For Solana authentication, if the identity does not exist and the credentials contain a public_key, the identity and authentication method are auto-provisioned before proceeding with the challenge-response flow.

impl AuthService

pub fn validate_token(&self, token: &str) -> Option<Token>

Validate a bearer token and return the associated token definition.

Checks in order:

1. Persisted session tokens (from login)
2. Catalog tokens (from CREATE AUTHENTICATION ... { method: token })

pub fn revoke_token(&self, token: &str) -> bool

Revoke a specific session token.

pub fn revoke_all(&self, identity: IdentityId)

Revoke all session tokens for a given identity.

pub fn cleanup_expired(&self)

Clean up expired sessions and challenges.

impl AuthService

pub fn new( engine: Arc<dyn AuthEngine>, auth_registry: Arc<AuthenticationRegistry>, rng: SystemRng, clock: Clock, config: AuthServiceConfig, ) -> Self

Trait Implementations

impl Clone for AuthService

fn clone(&self) -> AuthService

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Deref for AuthService

type Target = Inner

The resulting type after dereferencing.

fn deref(&self) -> &Inner

Dereferences the value.