Struct AuthorizedKeysAuth 

pub struct AuthorizedKeysAuth { /* private fields */ }

Authorized keys file-based authentication.

Loads and caches keys from an OpenSSH authorized_keys file. Supports hot-reloading when the file changes.

Example

use wish::auth::AuthorizedKeysAuth;

let auth = AuthorizedKeysAuth::new("/home/user/.ssh/authorized_keys")
    .expect("Failed to load authorized_keys");

// Reload keys after file change
auth.reload().await.expect("Failed to reload");

Implementations

impl AuthorizedKeysAuth

pub fn new(keys_path: impl AsRef<Path>) -> Result<Self>

Creates a new authorized keys auth handler.

Arguments

• keys_path - Path to the authorized_keys file. Supports ~ expansion.

Returns

The auth handler, or an error if the file cannot be loaded.

pub fn per_user(keys_path: impl AsRef<Path>) -> Self

Creates an auth handler that uses per-user authorized_keys files.

The path should contain %u which will be replaced with the username. For example: /home/%u/.ssh/authorized_keys

pub async fn reload(&self) -> Result<()>

Reloads keys from the file.

pub fn cached_key_count(&self) -> usize

Returns the number of cached keys.

pub fn keys_path(&self) -> &Path

Returns the path to the authorized keys file.

Trait Implementations

impl AuthHandler for AuthorizedKeysAuth

fn auth_publickey<'life0, 'life1, 'life2, 'async_trait>( &'life0 self, ctx: &'life1 AuthContext, key: &'life2 PublicKey, ) -> Pin<Box<dyn Future<Output = AuthResult> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait, 'life2: 'async_trait,

Authenticate with public key.

fn supported_methods(&self) -> Vec<AuthMethod>

Returns the authentication methods supported by this handler.

fn auth_password<'life0, 'life1, 'life2, 'async_trait>( &'life0 self, ctx: &'life1 AuthContext, password: &'life2 str, ) -> Pin<Box<dyn Future<Output = AuthResult> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait, 'life2: 'async_trait,

Authenticate with password.

fn auth_keyboard_interactive<'life0, 'life1, 'life2, 'async_trait>( &'life0 self, ctx: &'life1 AuthContext, response: &'life2 str, ) -> Pin<Box<dyn Future<Output = AuthResult> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait, 'life2: 'async_trait,

Authenticate with keyboard-interactive.

fn auth_none<'life0, 'life1, 'async_trait>( &'life0 self, ctx: &'life1 AuthContext, ) -> Pin<Box<dyn Future<Output = AuthResult> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Check if “none” authentication is allowed.