Struct ApiKey 

pub struct ApiKey(/* private fields */);

An Agent Assembly API key in aa_<32-hex-chars> format.

Implementations

impl ApiKey

pub fn parse(raw: &str) -> Result<Self, ApiKeyError>

Parse and validate a raw API key string.

Returns an error if the key doesn’t match aa_<32-hex-chars>.

pub fn generate() -> Self

Generate a new cryptographically random API key.

Returns the ApiKey and the plaintext string (for display to the user).

pub fn as_str(&self) -> &str

Return the raw key string.

pub fn hash(&self) -> Result<String, ApiKeyError>

Hash this key using argon2 for secure storage.

pub fn verify(&self, hash: &str) -> bool

Verify this key against a stored argon2 hash.

pub fn lookup(&self) -> String

Derive the fast, non-secret lookup index for this key (AAASM-4075).

A truncated SHA-256 of the raw key. Because SHA-256 is preimage-resistant, persisting this alongside the argon2 hash leaks nothing about the key even if the key store is exfiltrated, yet it lets ApiKeyStore::validate_detailed select the single candidate entry in O(1) and run the expensive argon2 verification only on that candidate — never once per stored key. argon2 remains the sole authority for the final match.

Trait Implementations

impl Clone for ApiKey

fn clone(&self) -> ApiKey

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ApiKey

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.