orxtra v0.13.0 /protocols.src.orxtra.protocols._types._auth
Updated
On this page

Auth domain types: TrustTier, MacVerdict/MacOutcome for keyed-MAC verification, ConsumerRecord and CredentialRecord for storage, the ephemeral per-request AuthContext, and the scope vocabulary (SCOPE_RUNS_READ, ALL_SCOPES, etc.).

#protocols.src.orxtra.protocols._types._auth

#protocols.src.orxtra.protocols._types._auth

#TrustTier

python
class TrustTier(StrEnum):

#MacOutcome

Result of a MAC verification operation.

#MacVerdict

Result of a keyed MAC verification.

Reports outcome, which secret was used, the algorithm, and optionally which key version matched (for rotation support).

#ConsumerRecord

A consumer (API client) stored in the auth backend.

#CredentialRecord

A credential stored in the auth backend.

#AuthContext

Ephemeral authenticated-request context.

Created per request when a credential is verified; never persisted. Carries the scopes, trust tier, and identity resolved for the caller of a single request.

consumer_id is None only for system-tier contexts (a future system/operator context with no backing consumer record); for all consumer-backed requests it is the resolved consumer's id.

Search