Struct AuthMode 

pub struct AuthMode {
    pub api_key: bool,
    pub jwt: Option<JwtConfig>,
}

Auth configuration for the engine’s HTTP API.

Both authentication methods (JWT and API key) can be enabled at the same time. When both are enabled, the middleware dispatches on token shape — tokens that parse as a JWS header are validated as JWTs, everything else is validated as an API key. This lets the same server accept long-lived machine API keys alongside short-lived OIDC-issued user tokens without the caller picking a mode up front.

Fields

api_key: bool

API-key authentication enabled. When true, Bearer tokens that are not JWT-shaped are validated against the api_keys table.

jwt: Option<JwtConfig>

JWT authentication enabled. When set, Bearer tokens that parse as a JWS header are validated against the issuer’s JWKS.

Implementations

impl AuthMode

pub fn no_auth() -> Self

Open access — no authentication. All requests allowed.

pub fn jwt(issuer: String, audience: Option<String>) -> Self

JWT/OIDC only. Tokens are validated against the issuer’s JWKS.

pub fn api_key() -> Self

API key only. Bearer tokens are hashed and looked up in the store.

pub fn combined(issuer: String, audience: Option<String>) -> Self

Both JWT and API key. Tokens that parse as JWTs take the JWT path; everything else takes the API-key path.

pub fn is_enabled(&self) -> bool

True if any authentication method is enabled.

pub fn describe(&self) -> String

Human-readable summary for startup logging.

Trait Implementations

impl Clone for AuthMode

fn clone(&self) -> AuthMode

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuthMode

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for AuthMode

fn default() -> AuthMode

Returns the “default value” for a type.