Struct FileKeyProvider 

pub struct FileKeyProvider { /* private fields */ }

Key provider that reads keys from a file or config.

Security: Implements Drop to zeroize key material from memory. Intentionally does not implement Clone to prevent accidental duplication of key material that would bypass zeroization.

Implementations

impl FileKeyProvider

pub fn from_hex_key(hex_key: &str, key_id: &str) -> Result<Self, AuthError>

Create a key provider from a hex-encoded 256-bit key.

pub fn add_key(&mut self, hex_key: &str, key_id: &str) -> Result<(), AuthError>

Add a key for rotation. The last added key becomes current.

Trait Implementations

impl Debug for FileKeyProvider

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Drop for FileKeyProvider

fn drop(&mut self)

Executes the destructor for this type.

fn pin_drop(self: Pin<&mut Self>)

🔬This is a nightly-only experimental API. (pin_ergonomics)

Execute the destructor for this type, but different to Drop::drop, it requires self to be pinned.

impl KeyProvider for FileKeyProvider

fn current_key(&self) -> Result<(SecretKey, String), AuthError>

Get the current (latest) encryption key and its ID.

fn key_by_id(&self, key_id: &str) -> Result<SecretKey, AuthError>

Get a key by its ID (for decrypting old data).

fn key_ids(&self) -> Vec<String>

List all available key IDs.