mssql-auth

Part of the rust-mssql-driver project.

Authentication strategies for SQL Server connections.

Overview

This crate provides various authentication methods for SQL Server, isolated from connection logic for better modularity and testing. It implements a tiered authentication system designed for different deployment scenarios.

Authentication Tiers

Tier 1: Core (Pure Rust, Default)

Tier 2: Azure Native (azure-identity feature)

Tier 3: Enterprise/Legacy (integrated-auth feature)

Usage

use mssql_auth::{SqlServerAuth, AzureAdAuth, AuthProvider};

// SQL Server authentication
let sql_auth = SqlServerAuth::new("sa", "Password123!");
let auth_data = sql_auth.authenticate().unwrap();

// Azure AD authentication with pre-acquired token
let azure_auth = AzureAdAuth::with_token("eyJ0eXAi...");

Feature Flags

Secure Credential Handling

Enable the zeroize feature for secure credential handling:

mssql-auth = { version = "0.5", features = ["zeroize"] }

This automatically zeroes sensitive data from memory when credentials are dropped.

Modules

Security Considerations

• Never log credentials or access tokens
• Use zeroize feature in production for sensitive environments
• Prefer Managed Identity over Service Principal when possible
• Client certificates provide mutual TLS authentication

License

MIT OR Apache-2.0