ores::service Namespace Reference

Common infrastructure shared by all domain microservices. More...

Enumerations
enum class	error_code { unauthorized , token_expired , forbidden }
	Error codes returned by service-layer request helpers. More...

Detailed Description

Common infrastructure shared by all domain microservices.

Provides the standard domain service lifecycle: early signal handling (SIGINT/SIGTERM), JWKS public-key fetch with exponential backoff, JWT verifier creation, subscription registration, graceful NATS drain, and shutdown logging. Eliminates boilerplate duplicated across the nine domain service binaries.

Enumeration Type Documentation

error_code

enum class error_code

strong

Error codes returned by service-layer request helpers.

Enumerator
unauthorized	The request did not carry a valid credential. No Authorization header, invalid format, or JWT signature failure. The client should log in before retrying.
token_expired	The JWT token has expired. The credential was well-formed but has passed its expiry time. The client may attempt a token refresh (iam.v1.auth.refresh) and then retry the original request.
forbidden	The caller is authenticated but lacks the required permission. The JWT was valid but the caller's permission list does not contain the permission required by this handler.