Struct SecurityConfig 

pub struct SecurityConfig {

    pub min_password_length: usize,
    pub require_password_complexity: bool,
    pub require_uppercase: bool,
    pub require_lowercase: bool,
    pub require_digit: bool,
    pub require_special: bool,
    pub min_complexity_criteria: usize,
    pub password_hash_algorithm: PasswordHashAlgorithm,
    pub jwt_algorithm: JwtAlgorithm,
    pub secret_key: Option<String>,
    pub secure_cookies: bool,
    pub cookie_same_site: CookieSameSite,
    pub csrf_protection: bool,
    pub session_timeout: Duration,
    pub lockout: LockoutConfig,
    pub max_api_keys_per_user: usize,
    pub oauth2: OAuth2SecurityConfig,
}

Security configuration options.

Fields

min_password_length: usize

Minimum password length (recommended: 12+ for strong security)

require_password_complexity: bool

Require password complexity

require_uppercase: bool

Require uppercase letters in password

require_lowercase: bool

Require lowercase letters in password

require_digit: bool

Require digits in password

require_special: bool

Require special characters in password

min_complexity_criteria: usize

Minimum number of complexity criteria that must be met

password_hash_algorithm: PasswordHashAlgorithm

Password hash algorithm

jwt_algorithm: JwtAlgorithm

JWT signing algorithm

secret_key: Option<String>

Secret key for signing (should be loaded from environment)

secure_cookies: bool

Enable secure cookies

cookie_same_site: CookieSameSite

Cookie SameSite policy

csrf_protection: bool

CSRF protection

session_timeout: Duration

Session timeout

lockout: LockoutConfig

Account lockout configuration

max_api_keys_per_user: usize

Maximum API keys per user (0 = unlimited)

oauth2: OAuth2SecurityConfig

OAuth2 configuration

Implementations

impl SecurityConfig

pub fn secure() -> Self

Create a new security configuration with secure defaults.

pub fn development() -> Self

Create a development-friendly configuration. WARNING: You MUST set a secret key before using this configuration! Use either config.security.secret_key or JWT_SECRET environment variable.

Trait Implementations

impl Clone for SecurityConfig

fn clone(&self) -> SecurityConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SecurityConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SecurityConfig

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for SecurityConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for SecurityConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.