Skip to main content

Crate sz_orm_auth

Crate sz_orm_auth 

Source
Expand description

§SZ-ORM Auth — 认证授权

提供 JWT 令牌签发/校验与基于 RBAC 的权限控制(Authorizer/RbacAuthorizer), 涵盖用户、凭证与角色权限模型。

§主要模块

  • auth — 用户、凭证等基础模型
  • jwt — JSON Web Token 签发与校验
  • authorizer — RBAC 授权器(含角色层级)
  • oauth2 — OAuth2 授权码流程(RFC 6749)
  • mfa — 多因素认证(TOTP, RFC 6238)
  • token_store — 刷新令牌存储(轮换 + 撤销 + 重放检测)

Re-exports§

pub use authorizer::Authorizer;
pub use authorizer::RbacAuthorizer;
pub use error::AuthError;
pub use mfa::MfaManager;
pub use mfa::MfaSecret;
pub use mfa::TotpVerifier;
pub use oauth2::AuthorizationCode;
pub use oauth2::AuthorizationRequest;
pub use oauth2::OAuth2Server;
pub use oauth2::TokenRequest;
pub use token_store::StoredToken;
pub use token_store::TokenFamilyError;
pub use token_store::TokenStore;
pub use auth::*;

Modules§

auth
authorizer
Role-Based Access Control (RBAC) authorizer.
error
jwt
Real JWT (HS256) implementation using RustCrypto audited crates.
mfa
多因素认证(MFA)框架
oauth2
OAuth2 授权码流程(Authorization Code Flow)
token_store
刷新令牌存储(Refresh Token Store)