fabro/crates
Bryan Helmkamp e0b8da08f2 Add mTLS authentication to arc-api
Support mutual TLS as an authentication strategy alongside JWT.
The server accepts both auth methods on the same port — mTLS if a
client cert is presented, JWT via Bearer header otherwise.

Config changes:
- Replace `authentication_strategy` (singular) with
  `authentication_strategies` (list of "jwt" and/or "mtls")
- Add `[api.tls]` section for cert, key, and CA paths

New files: tls.rs (rustls ServerConfig builder)
Modified: server_config.rs, jwt_auth.rs, serve.rs, lib.rs

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-03 17:36:22 -05:00
..
arc-agent Replace DIY terminal color with console crate 2026-03-03 16:02:10 -05:00
arc-api Add mTLS authentication to arc-api 2026-03-03 17:36:22 -05:00
arc-cli Simplify doctor --live: share HTTP client, concurrent LLM probes, extract helper 2026-03-03 16:19:39 -05:00
arc-db Add structured tracing across 7 crates per logging audit plan 2026-03-01 19:43:19 -05:00
arc-devcontainer allow dead code in arc-devcontainer for now 2026-03-03 14:49:22 -05:00
arc-git-storage Add structured tracing across 7 crates per logging audit plan 2026-03-01 19:43:19 -05:00
arc-llm Replace DIY terminal color with console crate 2026-03-03 16:02:10 -05:00
arc-mcp Add structured tracing across 7 crates per logging audit plan 2026-03-01 19:43:19 -05:00
arc-types Add spec-first OpenAPI for arc-api with generated types 2026-03-01 21:43:49 -05:00
arc-util Enforce semantic color scheme across CLI output 2026-03-03 16:09:03 -05:00
arc-workflows Enforce semantic color scheme across CLI output 2026-03-03 16:09:03 -05:00