Struct AuthGate 

pub struct AuthGate { /* private fields */ }

Configured authentication state for an apr serve instance.

expected_hash == None means auth is disabled — every request passes. The startup path emits a stderr warning when this happens so operators see the open door at boot.

Implementations

impl AuthGate

pub fn disabled() -> Self

Construct an explicitly-disabled gate. Test fixtures use this; the production startup path uses Self::from_env.

pub fn from_hash(expected_hash: [u8; 32]) -> Self

Construct an enabled gate from a SHA-256 digest of the expected bearer token. Tests use this to avoid touching env vars.

pub fn from_plain_key(key: &str) -> Self

Construct an enabled gate from a plaintext API key.

pub fn from_env() -> Self

Read configuration from env. APR_API_KEY_HASH (hex-encoded SHA-256) wins over APR_API_KEY (plaintext, hashed in-process). Neither set → disabled with a single stderr warning.

pub fn is_enabled(&self) -> bool

True iff the gate has a configured hash.

pub fn check_bearer(&self, header: Option<&str>) -> bool

Verify a presented Authorization header value.

Returns true iff the gate is disabled OR the header is exactly Bearer <key> and sha256(key) == expected_hash (constant-time). All other shapes — missing header, wrong scheme, empty token — return false.

Trait Implementations

impl Clone for AuthGate

fn clone(&self) -> AuthGate

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuthGate

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for AuthGate

fn default() -> AuthGate

Returns the “default value” for a type.