# api

Foxhunt API Service -- unified gRPC gateway with tonic-web for browser access, 6-layer authentication, RBAC, rate limiting, and gRPC proxy routing.

## Key Types

- `TradingServiceProxy` -- main gRPC proxy implementation
- `RoleBasedAccessControl` -- RBAC authorization
- `RateLimiter` -- 3-tier rate limiting (auth/trading/compute)
- `CircuitBreaker` -- upstream service protection

## Configuration

- `JWT_SECRET` -- JWT signing secret (min 32 chars)
- `CORS_ORIGINS` -- comma-separated allowed origins for gRPC-Web (default: http://localhost:5173)
- `TRADING_SERVICE_URL` -- trading service gRPC endpoint
- `ML_TRAINING_SERVICE_URL` -- ML training service gRPC endpoint

## Features

- `mfa` (default) -- multi-factor authentication support
- Build without: `cargo check -p api --no-default-features --features minimal`