Struct BasicAuthLayer 

pub struct BasicAuthLayer { /* private fields */ }

Tower Layer that enforces HTTP Basic authentication on every request.

On success, the verified Claims are injected into request extensions so the Ctx extractor in rok-auth can see the authenticated user without re-verifying the credentials.

On failure the layer short-circuits and returns 401 Unauthorized with a WWW-Authenticate: Basic realm="…" challenge header.

Example

use rok_auth::Claims;
use rok_auth_basic::BasicAuthLayer;

let layer = BasicAuthLayer::new("My API", |user: String, pass: String| async move {
    if user == "admin" && pass == std::env::var("API_PASS").unwrap_or_default() {
        Some(Claims::new(user, vec!["admin"]))
    } else {
        None
    }
});

let app = Router::new()
    .route("/metrics", get(metrics_handler))
    .layer(layer);

Implementations

impl BasicAuthLayer

pub fn new<F, Fut>(realm: impl Into<String>, verifier: F) -> Self

where F: Fn(String, String) -> Fut + Send + Sync + 'static, Fut: Future<Output = Option<Claims>> + Send + 'static,

Build a layer with a custom realm and async verifier closure.

verifier receives (username, password) and should return Some(Claims) on success or None to reject the request.

Trait Implementations

impl Clone for BasicAuthLayer

fn clone(&self) -> BasicAuthLayer

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<Svc> Layer<Svc> for BasicAuthLayer

type Service = BasicAuthService<Svc>

The wrapped service

fn layer(&self, inner: Svc) -> Self::Service

Wrap the given service with the middleware, returning a new service that has been decorated with the middleware.