Module api_key

API key management.

Format: <prefix>:<id>:<secret> where the secret is 32 random bytes encoded base64url. The : separator avoids ambiguity with the base64url alphabet (which includes _ and -). At rest, only the Argon2id hash of the secret is kept.

Structs

ApiKey

A single API key.

ApiKeyIdentity

Cedar identity a standalone API key is allowed to represent.

ApiKeyStore

In-memory API key store. Persists to JSON.