Expand description
Protocol-neutral authentication and authorization contracts.
Credential transport, cryptography, token formats, persistence, and web framework middleware belong to dedicated adapter crates.
Structs§
- Authentication
- Successful authentication through one named strategy.
- Authentication
Registry - Deterministic strategy router without runtime output downcasting.
- Authorization
Name - Stable authentication strategy, authorization policy, role, or permission name.
- Credential
- One presented credential routed to a named authentication strategy.
- Default
Authorization Evaluator - Evaluates every built-in authorization policy without I/O.
- Principal
Id - Opaque authenticated principal identity.
- Secret
String - Opaque secret value whose debug and display representations are redacted.
- Session
- Server-side authenticated session value.
- Session
Id - Opaque session identity safe to transport as a cookie value.
- Standard
Principal - Basic principal implementation suitable for role/permission services.
- Token
Pair - Access and refresh credentials issued together.
Enums§
- Authorization
Decision - Authorization result that can defer one named policy to application code.
- Authorization
Failure - Safe reason for a denied authorization decision.
- Authorization
Policy - Declarative authentication and authorization requirement.
- Credential
Kind - Transport-independent credential category.
Traits§
- Authentication
Strategy - Named credential authenticator registered at the application composition root.
- Authenticator
- Verifies one typed credential and returns an authenticated principal.
- Authorizer
- Asynchronous application authorization port for contextual or named policies.
- Principal
- Identity and grants consumed by portable authorization policies.
- Session
Store - Persistence port for server-side sessions.
- Token
Service - Token issue, rotation, and revocation application port.