Module auth

Structs§

AuthProof 🔒: Proves verify_websocket_claims accepted the token for the selected room.
HttpDisconnectClaims
HttpRoomClaims
NumericDate: RFC 7519 seconds since the Unix epoch with subsecond precision.
RegisteredJwtClaims: Registered JWT claims from RFC 7519 section 4.1.
WebSocketConnectClaims
WebSocketWireClaims 🔒: Wire identities remain separate because Odoo internal users send both keys. The RTC session identifies the participant, while the account does not.

decode_jwt_segment 🔒
decode_key 🔒
decode_signing_key 🔒: Decodes boundary key material and enforces the RFC 7518 HS256 minimum.
derive_key_from_seed 🔒
duration_since_epoch 🔒
pad_base64 🔒
sign: Errors
sign_hs256 🔒
split_token 🔒
unverified_websocket_room 🔒: Extracts a candidate room ID without authenticating the token.
validate_registered_claims 🔒
validate_registered_claims_at 🔒
validate_token_length 🔒
verify: Errors
verify_claims 🔒: Applies the same JWT policy as verify with a decoded signing key.
verify_hs256 🔒
verify_websocket_claims 🔒: Verifies a room-scoped token and resolves its runtime participant identity.