Struct SecurityConfig 

pub struct SecurityConfig {
    pub min_password_length: usize,
    pub require_password_complexity: bool,
    pub password_hash_algorithm: PasswordHashAlgorithm,
    pub jwt_algorithm: JwtAlgorithm,
    pub secret_key: Option<String>,
    pub previous_secret_key: Option<String>,
    pub secure_cookies: bool,
    pub cookie_same_site: CookieSameSite,
    pub csrf_protection: bool,
    pub session_timeout: Duration,
}

Security configuration options.

Governs password policy, JWT signing, cookie flags, CSRF protection, and session timeouts. Two named constructors cover the most common scenarios:

• SecurityConfig::secure() — hardened production defaults.
• SecurityConfig::development() — relaxed settings for local work.

For anything in between, start from Default::default() and override individual fields.

Fields

min_password_length: usize

Minimum password length

require_password_complexity: bool

Require password complexity

password_hash_algorithm: PasswordHashAlgorithm

Password hash algorithm

jwt_algorithm: JwtAlgorithm

JWT signing algorithm

secret_key: Option<String>

Secret key for signing (should be loaded from environment)

previous_secret_key: Option<String>

Previous secret key to maintain validation capabilities during rotation

secure_cookies: bool

Enable secure cookies

cookie_same_site: CookieSameSite

Cookie SameSite policy

csrf_protection: bool

CSRF protection

session_timeout: Duration

Session timeout

Implementations

impl SecurityConfig

pub fn secure() -> Self

Create a new security configuration with secure defaults.

Example

use auth_framework::config::SecurityConfig;

let sec = SecurityConfig::secure();
assert!(sec.secure_cookies);
assert!(sec.csrf_protection);
assert_eq!(sec.min_password_length, 12);

pub fn development() -> Self

Create a development-friendly configuration. WARNING: You MUST set a secret key before using this configuration! Use either config.security.secret_key or JWT_SECRET environment variable.

Example

use auth_framework::config::SecurityConfig;

let sec = SecurityConfig::development();
assert_eq!(sec.min_password_length, 6);
assert!(!sec.secure_cookies);

Trait Implementations

impl Clone for SecurityConfig

fn clone(&self) -> SecurityConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SecurityConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SecurityConfig

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for SecurityConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Display for SecurityConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Serialize for SecurityConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.