crates/nornir-auth-mtls/Cargo.toml
[package]
name = "nornir-auth-mtls"
version = "0.1.1"
edition = "2021"
authors = ["Ignalina ApS"]
description = "mTLS (client-certificate) auth PROVIDER for the nordisk servers — maps a mutual-TLS leaf-cert Common Name to an identity. Implements the shared `nornir_service::AuthProvider` seam via `verify_client_cert` (a transport-level provider, beside the bearer providers). Cryptographic client-cert trust (the CA chain) is established by the TLS transport (rustls handshake); this provider consumes the ALREADY-EXTRACTED CN — it does NOT independently path-validate a CA. The tiny, zero-crypto transport provider a server pins whenever it accepts client certs. Consumed by holger (reference impl), korp, dwarves."
license = "MIT OR Apache-2.0"
repository = "https://git.gunnar.rs/nordisk/edda"
keywords = ["auth", "mtls", "client-certificate", "grpc", "tonic"]
categories = ["authentication", "network-programming"]
[lib]
name = "nornir_auth_mtls"
[dependencies]
# The ONE shared auth-provider seam (`AuthProvider` + `Principal`). No TLS stack,
# no crypto, no HTTP here: the handshake + CA trust live in the transport
# (nornir-service `tls` / rustls at the server); this provider only maps the
# extracted leaf CN → Principal. Requires the 0.1.4 seam that carries the
# defaulted `verify_client_cert` method.
nornir-service = { version = "0.1.4", path = "../nornir-service", features = ["auth-provider"] }
tonic = { version = "0.14", default-features = false }
[dev-dependencies]
tokio = { version = "1", features = ["macros", "rt"] }