Struct IdentityProvider 

pub struct IdentityProvider { /* private fields */ }

Identity provider for managing users and sessions.

Implementations

impl IdentityProvider

pub fn new(master_key: [u8; 32], token_ttl: u64) -> Self

Create new identity provider.

pub fn register( &mut self, user_id: &str, password: &str, display_name: Option<&str>, attributes: HashMap<String, String>, ) -> Result<Identity>

Register a new user.

pub fn authenticate( &self, user_id: &str, password: &str, permissions: &[String], ttl: Option<u64>, ) -> Option<String>

Authenticate user and return session token.

Runs PBKDF2 even for non-existent users to prevent timing-based user enumeration (CWE-203).

pub fn validate_token(&self, token: &str) -> Option<Session>

Validate session token.

pub fn create_service_token( &self, session_token: &str, service: &str, permissions: &[String], ttl: u64, ) -> Option<String>

Create service-specific token.

pub fn validate_service_token( &self, token: &str, service: &str, ) -> Option<Session>

Validate service token.

pub fn refresh_token(&self, token: &str) -> Option<String>

Refresh session token.

pub fn get_identity(&self, user_id: &str) -> Option<&Identity>

Get user identity.

pub fn revoke_user(&mut self, user_id: &str)

Revoke user.

Trait Implementations

impl Drop for IdentityProvider

fn drop(&mut self)

Executes the destructor for this type.