Enum Auth 

pub enum Auth {
    Disabled,
    Enabled(HashMap<String, Principal>),
}

The daemon’s token registry. Disabled means no auth was configured — every request is served as an implicit admin (local/library behavior).

Variants

Disabled

Enabled(HashMap<String, Principal>)

Implementations

impl Auth

pub fn authenticate(&self, token: Option<&str>) -> Option<Principal>

Resolve a bearer token to its principal. Disabled always yields an implicit admin; Enabled yields the matching principal, or None when the token is missing or unknown (the caller maps that to 401).

pub fn parse_toml(s: &str) -> Result<Auth, String>

Parse a TOML principals file into an Enabled registry. Duplicate tokens are an error (ambiguous identity).

pub fn from_env( get: impl Fn(&str) -> Option<String>, read_file: impl Fn(&str) -> Result<String, String>, ) -> Result<Auth, String>

Resolve the daemon’s auth from the environment (pure — read_file injects the file IO so this is unit-testable):

• GONZALO_AUTH_FILE → parse that TOML principals file;
• else GONZALO_TOKEN → a single admin principal (back-compat);
• else → Disabled (open).