Enum AuthMode 

pub enum AuthMode {
    None,
    Bearer {
        tokens: HashMap<String, AuthSubject>,
    },
    Jwt {
        pkcs1_pubkey_der: Vec<u8>,
        expected_issuer: Option<String>,
    },
    Mtls,
    SaslPlain {
        users: HashMap<String, String>,
    },
}

Auth mode per daemon (CLI --auth-mode <MODE>).

Variants

None

No auth. Subject = “anonymous”.

Bearer

Bearer token comparison (HTTP header Authorization: Bearer …). Multi-token via map token → subject.

Fields

tokens: HashMap<String, AuthSubject>

Mapping from the token string to the resulting subject.

Jwt

JWT — RS256 signature validation against an RSA public key (DER bytes as from RsaPublicKey::to_pkcs1_der).

Fields

pkcs1_pubkey_der: Vec<u8>

PKCS#1 DER of the RSA public key.

expected_issuer: Option<String>

Optional issuer match (iss claim).

Mtls

mTLS — identity is supplied by the TLS layer (client cert), not by this function. AuthMode::validate with Mtls expects presented_subject = Some(...).

SaslPlain

SASL-PLAIN — username\0username\0password frame, with map username → password.

Fields

users: HashMap<String, String>

Mapping user → password.

Implementations

impl AuthMode

pub fn validate(&self, input: &AuthInput<'_>) -> Result<AuthSubject, AuthError>

Validate. Returns the subject or an AuthError.

Errors

AuthError with sub-variant.

Trait Implementations

impl Clone for AuthMode

fn clone(&self) -> AuthMode

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuthMode

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.