Struct BearerAuthLayer 

pub struct BearerAuthLayer { /* private fields */ }

[tower_layer::Layer] that wraps a router (or any inner tower service) with bearer-token auth.

Construct with bearer_auth. Use Self::allow_unauthenticated_health to change whether GET /health and GET /v1/health require the token too (they don’t, by default - see that method’s docs for why).

Implementations

impl BearerAuthLayer

pub fn allow_unauthenticated_health(self, allow: bool) -> Self

Controls whether GET /health and GET /v1/health (and only those two paths - not GET /v1/compatibility, which reveals the installed codex version) are reachable without a token.

Defaults to true: liveness probes rarely carry credentials, and a bare “is the process up” response leaks nothing sensitive. Set this to false for deployments where even that is unwanted, e.g. an operator who wants every request authenticated uniformly regardless of what it reveals.

Trait Implementations

impl Clone for BearerAuthLayer

fn clone(&self) -> BearerAuthLayer

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<S> Layer<S> for BearerAuthLayer

type Service = BearerAuthService<S>

The wrapped service

fn layer(&self, inner: S) -> Self::Service

Wrap the given service with the middleware, returning a new service that has been decorated with the middleware.