manta_server/server/common/
mod.rs

1//! Helpers used only by the manta HTTP server (handlers + service layer).
2//!
3//! - [`app_context`] — per-request [`app_context::InfraContext`] bundle
4//!   (backend dispatcher + base URLs + TLS material + optional
5//!   Vault/k8s URLs). Built by [`super::ServerState::infra_context`]
6//!   on every request.
7//! - [`audit`] — structured `auth_attempt` event builder that publishes
8//!   to Kafka via [`kafka::Kafka`]. Fire-and-forget; failures are
9//!   logged but never propagated.
10//! - [`jwt_ops`] — extract `name`, `preferred_username`, and
11//!   `realm_access.roles` from a bearer JWT without verifying the
12//!   signature (see the module-level security caveat).
13//! - [`kafka`] — lazily-initialised Kafka producer used by [`audit`].
14//! - [`vault`] — HTTP client for the HashiCorp Vault used by
15//!   handlers that need backend secrets (Gitea token, k8s creds).
16
17pub mod app_context;
18pub mod audit;
19pub mod jwt_ops;
20pub mod kafka;
21pub mod vault;