Struct BasicNostrExtractor 

pub struct BasicNostrExtractor { /* private fields */ }

The canonical JSS-parity authoriser.

Parses Authorization: Basic <b64(nostr:<token>)> headers, base64-decodes, splits on the first :, verifies the username is literally nostr, then treats the remainder as a NIP-98 event token and delegates to solid_pod_rs::auth::nip98::verify_at.

The URL verified against is reconstructed from the request’s scheme/host/path; see GitRequest::auth_url.

Implementations

impl BasicNostrExtractor

pub fn new() -> Self

Construct a default extractor (no pubkey allow-list).

pub fn with_allowed(self, pubkeys: Vec<String>) -> Self

Restrict to the given hex pubkeys (lowercase).

pub fn extract_nostr_token(header_value: &str) -> Result<String, AuthError>

Strip the Basic prefix, base64-decode, split on the first colon, and validate the username is nostr. Returns the raw NIP-98 token (the password half).

Trait Implementations

impl Clone for BasicNostrExtractor

fn clone(&self) -> BasicNostrExtractor

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for BasicNostrExtractor

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for BasicNostrExtractor

fn default() -> BasicNostrExtractor

Returns the “default value” for a type.

impl GitAuth for BasicNostrExtractor

fn authorise<'life0, 'life1, 'async_trait>( &'life0 self, req: &'life1 GitRequest, ) -> Pin<Box<dyn Future<Output = Result<String, AuthError>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Inspect req and either return Ok(webid_or_pubkey) — the identity string the CGI layer will expose in REMOTE_USER — or Err(AuthError).