manta_server/server/common/mod.rs
1//! Helpers used only by the manta HTTP server (handlers + service layer).
2//!
3//! - [`app_context`] — per-request [`app_context::InfraContext`] bundle
4//! (backend dispatcher + base URLs + TLS material + optional
5//! Vault/k8s URLs). Built by [`super::ServerState::infra_context`]
6//! on every request.
7//! - [`jwt_ops`] — extract `name`, `preferred_username`, and
8//! `realm_access.roles` from a bearer JWT without verifying the
9//! signature (see the module-level security caveat).
10//! - [`vault`] — HTTP client for the HashiCorp Vault used by
11//! handlers that need backend secrets (Gitea token, k8s creds).
12
13pub mod app_context;
14pub mod jwt_ops;
15pub mod vault;