Crate soma_auth 

Re-exports

pub use auth_context::AuthContext;

pub use auth_context::auth_context;

pub use auth_context::www_authenticate_value;

pub use middleware::ActorKeyDeriver;

pub use middleware::AuthLayer;

pub use middleware::AuthService;

pub use middleware::parse_bearer_token;

pub use middleware::tokens_equal;

Modules

at_rest

auth_context

Auth context injected into request extensions by crate::middleware::AuthLayer.

authelia

authorize

cimd

OAuth Client ID Metadata Documents (CIMD) support for soma-auth acting as an Authorization Server.

config

error

github

google

jwt

metadata

middleware

Dual-mode bearer/JWT/cookie auth middleware shipped as a [tower::Layer].

oauth_provider

redirect_uri

Pure redirect-URI trust checks shared by DCR (registration.rs) and CIMD (authorize.rs) client resolution. No I/O, no AuthState — every function here takes only strings/patterns and returns a bool, so this module has no feature dependency of its own beyond reqwest::Url parsing; it’s gated behind http-axum only because its sole callers are.

registration

Client registration and redirect-URI resolution: RFC 7591 Dynamic Client Registration (POST /register) and the redirect_uri trust boundary shared by DCR-registered clients and CIMD client_ids (see crate::cimd). Split out of authorize.rs to keep that module under the repo’s file-size contract — authorize() itself still lives there and calls resolve_client_redirect_uris from here.

routes

session

sqlite

state

token

types

upstream

Outbound OAuth support for upstream MCP servers.

util