Struct AuthHandler 

pub struct AuthHandler { /* private fields */ }

Authentication handler

Implementations

impl AuthHandler

pub fn new(config: AuthConfig) -> Self

Create a new auth handler with the given configuration

pub fn from_config_with_env(config: AuthConfig) -> Self

Load configuration with environment variable overrides

pub fn is_enabled(&self) -> bool

Check if authentication is enabled

pub fn is_protected(&self, path: &str) -> bool

Check if a path is protected

pub fn login_path(&self) -> &str

Get the login path

pub fn after_login_path(&self) -> &str

Get the after-login redirect path

pub fn login_endpoint(&self) -> Option<&str>

Get the login endpoint URL

pub fn logout_endpoint(&self) -> Option<&str>

Get the logout endpoint URL

pub fn jwt_cookie_name(&self) -> &str

Get the JWT cookie name

pub fn jwt_claims(&self) -> &[String]

Get the list of claims to extract

pub fn parse_jwt_cookie(&self, cookie_header: Option<&str>) -> Option<String>

Parse JWT from cookie header

pub fn decode_jwt(&self, token: &str) -> Result<JwtClaims>

Decode and validate a JWT token.

Always validates the signature. If no jwt_secret is configured, a random secret is generated at startup (logged as WARN). This means externally-signed tokens will be rejected unless the correct secret is provided.

pub fn build_jwt_cookie( &self, token: &str, max_age: i64, secure: bool, ) -> String

Build Set-Cookie header for JWT token

pub fn build_clear_cookie(&self) -> String

Build Set-Cookie header to clear the JWT cookie

Trait Implementations

impl Clone for AuthHandler

fn clone(&self) -> AuthHandler

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.