Struct KeyStore 

pub struct KeyStore { /* private fields */ }

An in-memory set of key_id → secret pairs loaded at startup.

Secrets are compared with subtle::ConstantTimeEq so a caller cannot learn a valid key one byte at a time by measuring how long a rejection takes. Only the key_id is ever recorded in the metering log.

Implementations

impl KeyStore

pub fn parse(contents: &str) -> Self

Reads key_id:secret lines, ignoring blank lines and # comments.

A line is split on the first : so a secret may itself contain colons. Lines without a colon are skipped; they are reported by KeyStore::load so a malformed file is visible at startup.

pub fn load(path: &Path) -> Result<Self, ApiError>

Loads and parses the keys file at path.

Fails closed (Phase 2 design §4): a missing file, an unreadable file, or a file that yields no usable key_id:secret line is a startup error. Starting with zero keys would serve 401 for every request while looking healthy, which is harder to diagnose than refusing to boot.

pub fn len(&self) -> usize

Number of provisioned keys.

pub fn is_empty(&self) -> bool

True when no key is provisioned, i.e. every request will be rejected.

pub fn verify(&self, key_id: &str, secret: &str) -> Result<String, ApiError>

Checks a presented token and returns its key_id on success.

Both an unknown key_id and a wrong secret are rejected with the same error, and the work done in each case is roughly equal, so the response does not reveal which keys exist.

Trait Implementations

impl Clone for KeyStore

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for KeyStore

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.