Struct AdminDisabledVerifier 

pub struct AdminDisabledVerifier;

Builds the configured AuthVerifier from the environment — secure by default.

Environment

var	default	meaning
AUTH_MODE	jwt	jwt (BYO) | smoo (hosted) | trusted (proxied, tokenless — see below) | none (dev only).
AUTH_JWT_HS256_SECRET	—	HS256 shared secret.
AUTH_JWT_RS256_PUBLIC_KEY	—	Static RS256 PEM public key.
AUTH_JWT_JWKS_URL	—	JWKS endpoint to fetch signing keys from (any algorithm — ES256/RS256/…).
AUTH_JWT_ISSUER	—	Required iss (optional). Also the JWKS auto-derivation root ({issuer}/.well-known/jwks.json).
AUTH_JWT_AUDIENCE	—	Required aud (optional).
AUTH_DEV_ORG_ID	dev-org	Org id for the none-mode admin principal.

Key-source precedence (jwt and smoo)

1. Static AUTH_JWT_RS256_PUBLIC_KEY (RS256 PEM) — the BYO path, unchanged.
2. Static AUTH_JWT_HS256_SECRET (HS256 shared secret).
3. JWKS — AUTH_JWT_JWKS_URL if set, else derived from the issuer as {AUTH_JWT_ISSUER}/.well-known/jwks.json. This is the ES256-capable path: keys are fetched + cached and selected per-token by kid, so auth.smoo.ai’s ES256 tokens verify and key rotation needs no redeploy.

So AUTH_MODE=smoo now needs only AUTH_JWT_ISSUER (+ optionally AUTH_JWT_AUDIENCE) — no static public key required.

Explicitly setting AUTH_MODE=jwt/smoo with no usable key source (no static key, no JWKS URL, and — for jwt — no issuer to derive one) is a hard AuthError::Misconfigured error — not a silent fall-through to no-auth. Leaving AUTH_MODE unset with no key source boots the server with the admin API disabled (AdminDisabledVerifier) so /ws serves without forcing auth config; /admin then returns 401 until configured (or AUTH_MODE=none for dev).

A verifier that rejects every request. The default when neither AUTH_MODE nor a key is configured: the server still boots (so /ws serves) but the /admin API is disabled until an operator sets AUTH_MODE + a key, or AUTH_MODE=none for local dev. Secure-by-default without hard-failing the whole service over admin config.

Trait Implementations

impl AuthVerifier for AdminDisabledVerifier

fn verify(&self, _bearer_token: &str) -> Result<Principal, AuthError>

Validate bearer_token (the raw token, without the Bearer prefix) and return the authenticated Principal.

fn mode(&self) -> &'static str

A short label for logs/metrics (never includes secrets).

impl Clone for AdminDisabledVerifier

fn clone(&self) -> AdminDisabledVerifier

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for AdminDisabledVerifier

impl Debug for AdminDisabledVerifier

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for AdminDisabledVerifier

fn default() -> AdminDisabledVerifier

Returns the “default value” for a type.