Module auth 

Transport-neutral authentication results and time-window-bounded request signatures.

Structs

JwtClaimProjection

Selects JWT values into handler-facing names using dot-separated payload paths.

RequestSignature

Signature fields transported as HTTP headers or gRPC metadata.

RequestSignatureVerifier

Verifies named signing keys and rejects signatures outside a bounded clock-skew window.

Enums

AuthFailure

Stable authentication failures shared by HTTP and gRPC adapters.

JwtValidationError

Transport-neutral HS256 validation errors.

Constants

AUTH_KEY_ID_HEADER

AUTH_SIGNATURE_HEADER

AUTH_TIMESTAMP_HEADER

Functions

decode_jwt_hs256

encode_jwt_hs256

sign_request

Signs a transport target using HMAC-SHA256(timestamp + method + target).