pacenotes_server/auth.rs
1//! Who may see a package: bearer token → sha256 → credential row → decision.
2//! Raw tokens are never stored or logged; only `hash_token` of one leaves a request.
3
4mod access_decision;
5mod bearer_header;
6mod token_lookup;
7mod token_secret;
8
9pub use access_decision::{decide, now, Decision, TokenRow};
10pub use bearer_header::bearer_from_headers;
11pub use token_lookup::load_token;
12pub use token_secret::{hash_token, mint_token, well_formed, TOKEN_PREFIX};