Module membership 

Wraps an AuthProvider to resolve transitive local-group membership per request Wraps an inner crate::types::AuthProvider and resolves the caller’s transitive local-group membership once per request – the one resolution site upstream of every consumer (is_admin(), caller_selectors/selector_matches’s group: arm).

Structs

MembershipProvider

Wraps inner, filling AuthContext.memberships with groups.current()’s closure over ctx.email after inner authenticates the request.

Traits

GroupSnapshot

The group-snapshot seam MembershipProvider resolves through – implemented by DbGroupsSource in production, and by a canned/error-returning test double in rust/auth/tests/membership_tests.rs, so this crate’s no-DB test policy can exercise the wrapper’s success and failure paths without a live Postgres.