Module auth 

Authentication and access control traits. Authentication and authorization framework types.

Defines: AuthError, AuthIdentity, Access (closed enum, the request authorization decision), the RBAC value tree (User/Role/Permission/DatabasePermission/TablePermission/ AttributePermission), AuthProvider (plugin extension for authentication — produces AuthIdentity), AuthPipeline, CookieJar.

Structs

AttributePermission

Per-attribute permission flags.

AuthPipeline

Authentication pipeline — runs providers in priority order.

CookieJar

Simple cookie jar abstraction for auth providers.

DatabasePermission

Database-level permissions — owns a per-table grant map.

LifecycleToken

Token data surfaced to AuthLifecycleHook::on_token_refresh.

LifecycleUser

Minimal user view handed to lifecycle hooks.

Permission

Role permissions — owns a per-database permission tree plus the platform-wide super_user toggle.

Role

Named role assignable to a user.

TablePermission

Table-level CRUD permission grants.

User

Authenticated user — username + assigned role. Held inside Access::User when a request has been authenticated; the Arc keeps Access cheap to clone across the pipeline.

Enums

Access

Authorization decision attached to a request Context.

AuthError

Authentication error.

AuthIdentity

Authentication identity — the result of successful authentication.

Constants

ROLE_SUPER_USER

Reserved role id for the platform’s built-in unrestricted role.

Traits

AuthLifecycleHook

Auth lifecycle hook — fires on login, logout, and token refresh of the legacy static auth path (Basic / JWT / OAuth session).

AuthProvider

Authentication provider trait.