Struct AuthenticationFactory 

pub struct AuthenticationFactory;

Authentication factory for creating and managing authentication components

Calls without an injected registry retain the legacy cache by config name. An injected crate::ProviderRegistry always binds an independent strategy and evaluator to that runtime’s metadata, generation, and admission owner.

Thread Safety

All methods are thread-safe and can be called concurrently from multiple threads. The factory uses OnceLock and Mutex to ensure safe concurrent access.

Implementations

impl AuthenticationFactory

pub async fn get_provider( config: &AuthConfig, ) -> AuthServiceResult<Arc<DefaultAuthenticationProvider>>

Get or create an authentication provider

Returns a cached DefaultAuthenticationProvider instance based on the config name. If no instance exists for this config, creates a new one and caches it.

Arguments

• config - Authentication configuration

Returns

• Ok(Arc<DefaultAuthenticationProvider>) - Cached or newly created provider
• Err(AuthServiceError) - If provider creation or caching fails

Example

let config = AuthConfig::default();
let provider = AuthenticationFactory::get_provider(&config)?;

pub async fn get_metadata_provider( config: &AuthConfig, ) -> AuthServiceResult<Option<Arc<dyn AuthenticationMetadataProvider>>>

Get authentication metadata provider

Mirrors Java’s factory behavior: a blank provider configuration returns None; a configured provider is initialized, cached by config name, and returned on later calls.

Arguments

• config - Authentication configuration

Returns

pub async fn get_metadata_provider_with_service( config: &AuthConfig, metadata_service: Option<Arc<dyn Any + Send + Sync>>, ) -> AuthServiceResult<Option<Arc<dyn AuthenticationMetadataProvider>>>

Get authentication metadata provider with service

Arguments

• config - Authentication configuration
• metadata_service - Optional provider-specific metadata service

Returns

pub async fn get_strategy( config: &AuthConfig, metadata_service: Option<Arc<dyn Any + Send + Sync>>, ) -> AuthServiceResult<Box<dyn AuthenticationStrategy>>

Create an authentication strategy matching the configured Java class name.

Blank configuration uses StatelessAuthenticationStrategy, matching Java. The Rust implementation supports the built-in stateless and stateful strategies and returns a configuration error for unsupported class names.

pub async fn get_evaluator( config: &AuthConfig, ) -> AuthServiceResult<Arc<AuthenticationEvaluator<Box<dyn AuthenticationStrategy>>>>

Get or create a cached authentication evaluator.

pub async fn get_evaluator_with_service( config: &AuthConfig, metadata_service: Option<Arc<dyn Any + Send + Sync>>, ) -> AuthServiceResult<Arc<AuthenticationEvaluator<Box<dyn AuthenticationStrategy>>>>

Get or create a cached authentication evaluator with provider-specific service.

pub fn get_metadata_manager<A, B>( _config: &AuthConfig, auth_provider: Option<A>, authz_provider: Option<B>, ) -> AuthenticationMetadataManagerImpl<A, B>

where A: AuthenticationMetadataProvider + 'static, B: AuthorizationMetadataProvider + 'static,

Create a new authentication metadata manager

Unlike other factory methods, this always creates a new instance (no caching). The manager coordinates authentication and authorization metadata providers.

Type Parameters

• A - Authentication metadata provider type
• B - Authorization metadata provider type

Arguments

• _config - Authentication configuration (currently unused but kept for API compatibility)
• auth_provider - Optional authentication metadata provider
• authz_provider - Optional authorization metadata provider

Returns

A new AuthenticationMetadataManagerImpl instance

pub async fn new_context_from_metadata( config: &AuthConfig, metadata: &HashMap<String, String>, request: Box<dyn Any + Send>, ) -> AuthServiceResult<Option<DefaultAuthenticationContext>>

Create a new authentication context from gRPC metadata

Arguments

• config - Authentication configuration
• metadata - gRPC metadata headers
• request - Protocol buffer request message

Returns

• Ok(Some(context)) - Successfully created context
• Err(AuthServiceError) - If provider retrieval fails

pub async fn new_context_from_command( config: &AuthConfig, command: &RemotingCommand, ) -> AuthServiceResult<Option<DefaultAuthenticationContext>>

Create a new authentication context from a remoting command

Arguments

• config - Authentication configuration
• command - RocketMQ remoting command

Returns

• Ok(Some(context)) - Successfully created context
• Err(AuthServiceError) - If provider retrieval fails