authenticator.hpp File Reference

#include <chrono>
#include <cstdint>
#include <functional>
#include <optional>
#include <string>
#include "axiam/client.hpp"
#include "axiam/errors.hpp"
#include "axiam/guard.hpp"
#include "axiam/jwks.hpp"

Go to the source code of this file.

Classes
struct	axiam::AuthenticatorOptions
	Tuning for TokenAuthenticator. The defaults are the safe ones. More...
class	axiam::TokenAuthenticator
	Safe-by-default local verification of an AXIAM access token. More...

Namespaces
namespace	axiam

Typedefs
using	axiam::NowFn = std::function< std::int64_t()>
	Clock seam: returns the current time as unix seconds. Injected in tests.

Functions
TokenAuthenticator	axiam::make_authenticator (Client &client, std::string expected_tenant_id, AuthenticatorOptions options={})
	Convenience factory: an authenticator bound to a client's JWKS verifier.

Variables
constexpr std::chrono::seconds	axiam::kDefaultClockSkew {30}
	CONTRACT §10.1 rule 7 — the leeway applied to exp and nbf must be a named, documented, bounded constant, never an inline literal and never operator-configurable to an unbounded value.
constexpr std::chrono::seconds	axiam::kMaxClockSkew {60}