Struct KeyPolicy 

pub struct KeyPolicy { /* private fields */ }

Key usage policy defining allowed operations and constraints

Implementations

impl KeyPolicy

pub fn new() -> Self

Create a new permissive policy (all operations allowed, no limits)

pub fn restrictive() -> Self

Create a restrictive policy (no operations allowed by default)

pub fn allow_operation(self, op: Operation) -> Self

Allow a specific operation

pub fn deny_operation(self, op: Operation) -> Self

Deny a specific operation

pub fn max_uses(self, limit: u64) -> Self

Set maximum number of uses

pub fn valid_for(self, duration: Duration) -> Self

Set key validity period (from now)

pub fn valid_from(self, time: SystemTime) -> Self

Set key validity start time

pub fn valid_until(self, time: SystemTime) -> Self

Set key validity end time

pub fn require_context(self, key: String) -> Self

Require a context key for usage

pub fn with_metadata(self, key: String, value: String) -> Self

Add metadata to the policy

pub fn allows_operation(&self, op: Operation) -> bool

Check if an operation is allowed by this policy

pub fn check_usage_limit( &self, current_uses: u64, ) -> Result<(), PolicyViolation>

Check if usage count is within limits

pub fn check_validity(&self) -> Result<(), PolicyViolation>

Check if key is within validity period

pub fn check_context( &self, context: Option<&HashMap<String, String>>, ) -> Result<(), PolicyViolation>

Check if required context is provided

Trait Implementations

impl Clone for KeyPolicy

fn clone(&self) -> KeyPolicy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for KeyPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for KeyPolicy

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for KeyPolicy

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for KeyPolicy

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.