Struct ApiKeyService 

pub struct ApiKeyService<S> { /* private fields */ }

Implementations

impl<S> ApiKeyService<S>

where S: UserRepository + ApiKeyRepository + Clone + Send + Sync + 'static,

pub fn new(storage: S) -> Self

pub async fn create( &self, user_id: Uuid, org_id: Option<Uuid>, name: String, scopes: Vec<String>, expires_at: DateTime<Utc>, ) -> Result<ApiKeyResponse>

Create a new API key for user_id. Returns the ApiKey row and the raw key (hex-encoded 32 random bytes). The raw key is never stored; only the SHA-256 hash is persisted.

expires_at is required and must be at most [MAX_KEY_TTL] (365 days) in the future.

pub async fn list(&self, user_id: Uuid) -> Result<Vec<ApiKey>>

List all API keys belonging to user_id.

pub async fn revoke(&self, user_id: Uuid, key_id: Uuid) -> Result<()>

Revoke (delete) an API key. Enforces that the key belongs to user_id.

pub async fn authenticate(&self, raw_key: &str) -> Result<ApiKey>

Authenticate using a raw API key string.

Returns Err(AuthError::InvalidToken) if the key is unknown, expired, or otherwise invalid. On success, updates last_used_at.