Expand description
§SZ-ORM Auth — 认证授权
提供 JWT 令牌签发/校验与基于 RBAC 的权限控制(Authorizer/RbacAuthorizer),
涵盖用户、凭证与角色权限模型。
§主要模块
auth— 用户、凭证等基础模型jwt— JSON Web Token 签发与校验authorizer— RBAC 授权器(含角色层级)oauth2— OAuth2 授权码流程(RFC 6749)mfa— 多因素认证(TOTP, RFC 6238)token_store— 刷新令牌存储(轮换 + 撤销 + 重放检测)
Re-exports§
pub use authorizer::Authorizer;pub use authorizer::RbacAuthorizer;pub use error::AuthError;pub use mfa::MfaManager;pub use mfa::MfaSecret;pub use mfa::TotpVerifier;pub use oauth2::AuthorizationCode;pub use oauth2::AuthorizationRequest;pub use oauth2::OAuth2Server;pub use oauth2::TokenRequest;pub use token_store::StoredToken;pub use token_store::TokenFamilyError;pub use token_store::TokenStore;pub use auth::*;
Modules§
- auth
- authorizer
- Role-Based Access Control (RBAC) authorizer.
- error
- jwt
- Real JWT (HS256) implementation using RustCrypto audited crates.
- mfa
- 多因素认证(MFA)框架
- oauth2
- OAuth2 授权码流程(Authorization Code Flow)
- token_
store - 刷新令牌存储(Refresh Token Store)