Module server 

For services: issuing and checking tokens, and an axum extractor.

Structs

Authenticated

The verified claims of the request’s bearer token. Requires the TokenVerifier as an Extension<Arc<TokenVerifier>> layer. A read-only campaign’s token is refused for anything but reading.

TokenSigner

Mints tokens. Only the auth service holds one.

TokenVerifier

Checks tokens. Needs only the auth service’s public key.

Enums

Refused

Why a request’s token isn’t enough.

Constants

READ_ONLY

What a read-only campaign’s devices are told when they try to change it.