List of all items

Structs

• auth::AuthValidationService
• auth::HookTokenValidator
• auth::ValidatedHookClaims
• authz::audit::DbAuditSink
• authz::audit::GovernanceDecisionRecord
• authz::audit::GovernanceDecisionRepository
• authz::audit::NullAuditSink
• authz::composite::CompositeAuthzHook
• authz::config::AccessControlConfig
• authz::config::RuleEntry
• authz::extension::AuthzExtension
• authz::hook::AllowAllHook
• authz::hook::DenyAllHook
• authz::hook::WebhookHook
• authz::ingestion::AccessControlIngestionService
• authz::ingestion::IngestOptions
• authz::ingestion::IngestReport
• authz::registry::AuthzHookContext
• authz::registry::AuthzHookRegistration
• authz::repository::AccessControlRepository
• authz::repository::ExportRuleRow
• authz::repository::UpsertRuleParams
• authz::resolver::ResolveInput
• authz::rule_based::RuleBasedHook
• authz::types::AccessRule
• authz::types::AuthzContext
• authz::types::AuthzRequest
• authz::types::EntityRow
• extraction::CookieExtractor
• extraction::HeaderExtractor
• extraction::HeaderInjectionError
• extraction::HeaderInjector
• extraction::TokenExtractor
• jwt::decode::JwtUserContext
• jwt::mint::AdminTokenParams
• jwt::mint::JwtService
• keys::RsaSigningKey
• keys::jwks::Jwk
• keys::jwks::Jwks
• keys::jwks_client::JwksClient
• policy::types::GovernanceChain
• policy::types::McpToolInput
• policy::types::PolicyContext
• policy::types::RateLimitWindow
• policy::types::SecretLocation
• services::ScannerDetector
• session::SessionGenerator
• session::SessionParams
• session::ValidatedSessionClaims

Enums

• auth::AuthMode
• authz::audit::AuthzSource
• authz::error::AuthzBootstrapError
• authz::error::AuthzError
• authz::types::Access
• authz::types::AuthzDecision
• authz::types::Decision
• authz::types::DecisionTag
• authz::types::DenyReason
• authz::types::EntityKind
• authz::types::EntityRef
• authz::types::MatchedBy
• authz::types::RuleType
• error::AuthError
• error::JwtError
• error::ManifestSigningError
• extraction::CookieExtractionError
• extraction::ExtractionMethod
• extraction::TokenExtractionError
• keys::KeyError
• keys::authority::TokenAuthorityError
• keys::jwks_client::JwksClientError
• policy::types::AccessScope
• policy::types::AgentScope

Traits

• authz::audit::AuthzAuditSink
• authz::hook::AuthzDecisionHook
• policy::types::GovernancePolicy

Macros

• register_authz_hook

Functions

• at_rest::hmac_sha256
• at_rest::hmac_sha256_hex
• authz::audit::insert_governance_decision
• authz::registry::discover_authz_hook
• authz::resolver::resolve
• authz::runtime::build_authz_hook
• jwt::decode::extract_user_context
• keys::authority::active_kid
• keys::authority::decoding_key
• keys::authority::decoding_key_for_kid
• keys::authority::encoding_key
• keys::authority::signing_key
• keys::compute_kid
• keys::jwks_client::clamp_ttl
• keys::jwks_client::parse_max_age
• manifest_signing::canonicalize
• manifest_signing::pubkey_b64
• manifest_signing::sign_value
• manifest_signing::signing_key

Type Aliases

• authz::error::AuthzResult
• authz::hook::SharedAuthzHook
• error::AuthResult
• error::JwtResult
• error::ManifestSigningResult
• keys::authority::TokenAuthorityResult

Constants

• authz::audit::AUDIT_WRITE_FAILED_TOTAL
• keys::DEFAULT_RSA_BITS
• keys::jwks_client::DEFAULT_CACHE_CAPACITY
• keys::jwks_client::DEFAULT_CACHE_TTL
• keys::jwks_client::DEFAULT_MIN_REFRESH_INTERVAL
• keys::jwks_client::MAX_CACHE_TTL
• keys::jwks_client::MIN_CACHE_TTL