Skip to main content Crate rocketmq_auth Copy item path Source Acl AclAuthorizationHandler ACL Authorization Handler. AclClientRpcHook AclImportAccount One prepared account in an authoritative ACL file import. AclMetadataHandle Concurrent ACL operations sharing the runtime’s admission and drain owner. AllowAllAuthenticationStrategy Authentication strategy that allows all requests. AuthConfig AuthMetricSample AuthMetrics AuthMetricsSnapshot AuthRequestGuard Keeps an admitted authentication request in the runtime’s drain set.
Dropping the guard releases the request; it does not close providers. AuthRuntime AuthRuntimeBuilder AuthServiceError Typed operational failure returned by authentication and authorization services. AuthStartupFailure Startup failure with the original cause and any incomplete cleanup retained. AuthenticationEvaluator Authentication evaluator - main entry point for authentication. AuthenticationFactory Authentication factory for creating and managing authentication components AuthenticationMetadataManagerImpl Default implementation of AuthenticationMetadataManager. AuthenticationService AuthorizationEvaluator Authorization evaluator - main entry point for authorization decisions AuthorizationFactory Compatibility factory for standalone callers. Runtime composition uses an
injected crate::ProviderRegistry AuthorizationHandlerChain Authorization handler chain. AuthorizationMetadataManager Authorization metadata manager. AuthorizationMetadataManagerImpl Production implementation of Authorization Metadata Manager. AuthorizationRequest Canonical request type for authorization policy models. AuthorizationService BootstrapAdminIdentity Non-secret first-administrator mTLS identity selected by the enrollment request. BootstrapEnrollmentRequest Enrollment input. Proof material is zeroized when this value leaves scope. BootstrapEnrollmentResult Successful enrollment result without credential or proof material. BootstrapGrant Grant metadata and a one-way proof digest. Raw proof material is discarded at construction. BootstrapTransportContext Authenticated listener metadata supplied by the transport boundary. CredentialAuditEvent Non-sensitive audit event. IDs and fingerprints are metadata, never credential material. CredentialDescriptor Public metadata for a fully validated credential. It never contains proof or key material. CredentialId Stable, non-secret key identifier used for routing verification requests. CredentialRotationManager Concurrent credential owner. Readers load one immutable snapshot; writers serialize and
publish only after validation and audit succeed. CredentialRotationSnapshot Immutable view of one credential-rotation generation without secret material. CredentialVerification Accepted proof, identifying the credential, rotation generation, and source. DefaultAuthenticationContext DefaultAuthenticationContextBuilder Default authentication context builder. DefaultAuthenticationProvider Default authentication provider. DefaultAuthorizationContext Default authorization context containing all information needed for authorization decisions. DefaultAuthorizationProvider Default authorization provider implementation. EncryptedFileSecretProvider AES-256-GCM local development adapter with owner-only, immutable version files. Environment Authorization environment model. EnvironmentSecretProvider Read-only development adapter that maps logical names to an explicit environment allowlist. FileAclConfigStore LoadedMaintenancePolicy A policy whose bytes, version, and semantic invariants were validated. LocalAuthenticationMetadataProvider Local authentication metadata provider backed by an in-memory snapshot and an
optional JSON snapshot file. LocalAuthorizationMetadataProvider Local authorization metadata provider backed by an in-memory snapshot and an optional JSON
snapshot file. MaintenancePolicyReference Immutable reference used to pin a policy by path, version, and SHA-256. NoopMetadataProvider No-op authorization metadata provider for testing and disabled scenarios. OneTimeBootstrap Persistent, fail-closed one-time bootstrap coordinator. Permission Policy PolicyEntry PolicyResource Canonical resource type for authorization policy models. ProviderBundle Candidate provider bindings. Their control handles follow initialization order. ProviderCleanupErrors All provider cleanup failures, retained for trusted diagnostics. ProviderRegistry RemotingAuthContext Typed, read-only transport facts used by remoting authentication and authorization. RequestContext Frozen 1.x compatibility name for AuthorizationRequest Resource Frozen 1.x compatibility name for PolicyResource RetiringCredentialSnapshot Previous active credential retained until the overlap window ends. SecretProviderRegistry Explicit, composition-root-owned provider registry. It deliberately has no global singleton. SecurityPrincipal Authenticated identity without credential material. SecurityResource Resource selected for a policy decision. StatefulAuthenticationStrategy Stateful authentication strategy with caching. StatefulAuthorizationStrategy Stateful authorization strategy with caching. StatelessAuthenticationStrategy Stateless authentication strategy. StatelessAuthorizationStrategy Stateless authorization strategy. SubjectKey Owned subject identity at the dynamic metadata boundary. User UserMetadataHandle Concurrent user operations sharing the runtime’s admission and drain owner. ValidatedCredential Credential whose certificate/key pair and proof have already been parsed and validated. WhiteList AuthFailureKind Closed, low-cardinality classification of an authentication service failure. AuthOperation Closed, low-cardinality operation associated with an authentication service failure. AuthorizationDecision Final authorization decision returned by a policy layer. AuthorizationDenial Closed, non-sensitive reasons for rejecting an authorization request. BootstrapStatus Persisted lifecycle of a one-time bootstrap grant. BreakGlassReason Typed reason required before break-glass can be enabled. BreakGlassStatus Activation state of the emergency credential in a rotation snapshot. CredentialAuditAction Stable actions sent to the injected audit sink before state publication. CredentialAuditOutcome CredentialVerificationSource Request-path source that accepted a proof. PolicyDecision Canonical decision type for authorization policy models. PolicyType SignatureAlgorithm SubjectType UserStatus UserType DEFAULT_CHARSET Default charset for ACL signing. AclMetadataPort Concurrent ACL metadata operations, independent of lifecycle control. AclMetadataRead ACL lookup capability without mutation or provider lifecycle access. AclSnapshotImport Optional capability for importing user and ACL metadata as one provider operation. AuthenticationContext AuthenticationContextBuilder Authentication context builder trait. AuthenticationMetadataManager Authentication metadata manager trait. AuthenticationMetadataProvider Authentication metadata provider for user management. AuthenticationProvider Authentication provider trait. AuthenticationStrategy AuthorizationHandler Authorization handler trait. AuthorizationMetadataProvider Authorization metadata provider trait. AuthorizationProvider Authorization provider trait. AuthorizationStrategy Trait defining the core authorization strategy behavior. BootstrapAdminProvisioner Injection boundary that must atomically reject creation when an administrator already exists. CredentialAuditSink Synchronous audit-first boundary. PR-M11-06 owns asynchronous buffering and shutdown drain. CredentialBundleParser Parser injected by the owning protocol/TLS adapter. ProviderControl Lifecycle control owned once by the runtime, separate from concurrent data ports. Subject UserMetadataPort Concurrent user metadata operations owned by an Auth runtime. UserMetadataRead User lookup capability without mutation or provider lifecycle access. cal_signature Calculate ACL signature using HMAC-SHA1. cal_signature_segments cal_signature_segments_with_algorithm cal_signature_with_algorithm project_authorization_error Classifies an authorization failure for the fail-closed layered contract. project_policy_decision Projects an internal policy decision into the detailed authorization contract. AuthServiceResult Result returned by authentication and authorization service operations. AuthenticationFuture Authentication strategy trait. ProviderFuture