Struct ApiKeyManager 

pub struct ApiKeyManager { /* private fields */ }

API Key Manager

Manages API key lifecycle with injected storage.

Implementations

impl ApiKeyManager

pub fn new(store: Arc<dyn ApiKeyStore>) -> Self

Create new API key manager with injected store

Examples

use armature_auth::api_key::*;
use chrono::{DateTime, Utc};
use std::sync::Arc;

let store: Arc<dyn ApiKeyStore> = Arc::new(MyStore);
let manager = ApiKeyManager::new(store);

pub fn with_prefix(self, prefix: impl Into<String>) -> Self

Set key prefix (default: “ak”)

pub fn with_expiration(self, duration: Option<Duration>) -> Self

Set default expiration duration

pub async fn generate( &self, user_id: impl Into<String>, scopes: Vec<String>, ) -> Result<ApiKey, ApiKeyError>

Generate a new API key

Examples

let key = manager.generate(
    "user_123",
    vec!["read".to_string(), "write".to_string()]
).await?;

println!("API Key: {}", key.key);
println!("Key ID: {}", key.id);

pub async fn validate(&self, key: &str) -> Result<Option<ApiKey>, ApiKeyError>

Validate an API key

Returns the API key if valid, None if invalid, or an error.

pub fn has_scope(&self, api_key: &ApiKey, required_scope: &str) -> bool

Check if key has required scope

pub async fn revoke(&self, key_id: &str) -> Result<(), ApiKeyError>

Revoke an API key

pub async fn list_user_keys( &self, user_id: &str, ) -> Result<Vec<ApiKey>, ApiKeyError>

List all keys for a user

pub async fn rotate(&self, old_key_id: &str) -> Result<ApiKey, ApiKeyError>

Rotate an API key (revoke old, generate new)

pub fn hash_key(key: &str) -> String

Hash an API key (for storage)