Struct ProxyServer 

pub struct ProxyServer { /* private fields */ }

Universal proxy server.

Implementations

impl ProxyServer

pub fn from_config(config: ProxyConfig) -> Self

Create from YAML config file.

pub fn with_descriptors(self, pool: DescriptorPool) -> Self

Create with an embedded descriptor pool (for sid-proxy backward compat).

pub fn with_auth_decider(self, decider: Arc<dyn AuthDecider>) -> Self

Inject an in-process forward-auth / PDP decision (embedded Tier-2 hook).

The decider gates every proxied request inline and also backs the /verify forward-auth endpoint. Its signature is axum-free (see hooks::AuthDecider), so the embedder never names an HTTP framework.

pub fn with_oidc_backend(self, backend: Arc<dyn OidcBackend>) -> Self

Back the stateless OIDC surface (discovery, JWKS, userinfo) with the embedder’s key/client metadata (embedded Tier-2 hook).

When set, this supersedes the config-driven static oidc_discovery routes. See hooks::OidcBackend.

pub fn with_extra_routes( self, routes: impl IntoIterator<Item = ExtraRoute>, ) -> Self

Register extra stateless routes through an axum-free adapter (embedded Tier-2 hook). See hooks::ExtraRoute / hooks::ExtraRouteHandler.

pub fn with_verify_path(self, path: impl Into<String>) -> Self

Set the path at which the injected AuthDecider answers forward-auth sub-requests (/verify). Independent of any JWT forward_auth config, so a decider-only embedder can place it without a JWT block.

Resolution order for the path: this override, then auth.forward_auth.path from config, then the default /auth/verify.

pub fn router(&self) -> Result<Router>

Build the axum router with all endpoints.

pub async fn serve(&self) -> Result<()>

Start serving on configured address.