Struct AuthManager 

pub struct AuthManager { /* private fields */ }

The main authentication and authorization manager

Implementations

impl AuthManager

pub fn new(config: AuthConfig) -> Self

Create a new authentication manager

pub fn new_default() -> Self

Create with default config

pub fn with_auth_enabled() -> Self

Create an auth manager with authentication enabled

pub fn create_principal( &self, name: &str, password: &str, principal_type: PrincipalType, roles: HashSet<String>, ) -> AuthResult<()>

Create a new principal (user or service account)

pub fn delete_principal(&self, name: &str) -> AuthResult<()>

Delete a principal

pub fn get_principal(&self, name: &str) -> Option<Principal>

Get a principal by name

pub fn list_principals(&self) -> Vec<String>

List all principals

pub fn update_password(&self, name: &str, new_password: &str) -> AuthResult<()>

Update principal password

pub fn add_role_to_principal( &self, principal_name: &str, role_name: &str, ) -> AuthResult<()>

Add a role to a principal

pub fn remove_role_from_principal( &self, principal_name: &str, role_name: &str, ) -> AuthResult<()>

Remove a role from a principal

pub fn create_role(&self, role: Role) -> AuthResult<()>

Create a custom role

pub fn delete_role(&self, name: &str) -> AuthResult<()>

Delete a custom role

pub fn get_role(&self, name: &str) -> Option<Role>

Get a role by name

pub fn list_roles(&self) -> Vec<String>

List all roles

pub fn add_acl(&self, entry: AclEntry)

Add an ACL entry

pub fn remove_acls( &self, principal: Option<&str>, resource: Option<&ResourceType>, )

Remove ACL entries matching criteria

pub fn list_acls(&self) -> Vec<AclEntry>

List ACL entries

pub fn authenticate( &self, username: &str, password: &str, client_ip: &str, ) -> AuthResult<AuthSession>

Authenticate a principal and create a session

pub fn get_session(&self, session_id: &str) -> Option<AuthSession>

Get an active session by ID

pub fn invalidate_session(&self, session_id: &str)

Invalidate a session (logout)

pub fn invalidate_all_sessions(&self, principal_name: &str)

Invalidate all sessions for a principal

pub fn cleanup_expired_sessions(&self)

Clean up expired sessions

pub fn create_session(&self, principal: &Principal) -> AuthSession

Create a session for a principal (used by SCRAM after successful auth)

pub fn authorize( &self, session: &AuthSession, resource: &ResourceType, permission: Permission, client_ip: &str, ) -> AuthResult<()>

Check if a session/principal has permission on a resource

pub fn authorize_anonymous( &self, resource: &ResourceType, permission: Permission, ) -> AuthResult<()>

Simple authorization check without session (for internal use)