Struct ApiKey

pub struct ApiKey {
    pub id: String,
    pub prefix: String,
    pub secret_hash: String,
    pub scopes: Vec<String>,
    pub identity: Option<ApiKeyIdentity>,
    pub created_at: i64,
    pub expires_at: Option<i64>,
    pub last_used_at: Option<i64>,
    pub revoked_at: Option<i64>,
}

A single API key.

Fields

id: String

prefix: String

secret_hash: String

Argon2id hash of the secret half.

scopes: Vec<String>

identity: Option<ApiKeyIdentity>

Required request identity binding for standalone PDP decision routes. The explicit authorize:any capability may act on another subject, but the key still has a service identity for attribution and tenancy.

created_at: i64

expires_at: Option<i64>

last_used_at: Option<i64>

revoked_at: Option<i64>

Implementations

impl ApiKey

pub fn has_scope(&self, required: &str) -> bool

Whether the key grants a named capability. * grants all scopes.

Trait Implementations

impl Clone for ApiKey

fn clone(&self) -> ApiKey

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ApiKey

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for ApiKey

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for ApiKey

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.