fabro/crates/arc-api
Bryan Helmkamp e0b8da08f2 Add mTLS authentication to arc-api
Support mutual TLS as an authentication strategy alongside JWT.
The server accepts both auth methods on the same port — mTLS if a
client cert is presented, JWT via Bearer header otherwise.

Config changes:
- Replace `authentication_strategy` (singular) with
  `authentication_strategies` (list of "jwt" and/or "mtls")
- Add `[api.tls]` section for cert, key, and CA paths

New files: tls.rs (rustls ServerConfig builder)
Modified: server_config.rs, jwt_auth.rs, serve.rs, lib.rs

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-03 17:36:22 -05:00
..
src Add mTLS authentication to arc-api 2026-03-03 17:36:22 -05:00
tests Add mTLS authentication to arc-api 2026-03-03 17:36:22 -05:00
Cargo.toml Add mTLS authentication to arc-api 2026-03-03 17:36:22 -05:00