Struct SecurityConfig 

pub struct SecurityConfig {
    pub audit_logging: AuditLoggingConfig,
    pub error_sanitization: ErrorSanitizationConfig,
    pub rate_limiting: RateLimitConfig,
    pub state_encryption: StateEncryptionConfig,
    pub constant_time: ConstantTimeConfig,
    pub role_definitions: Vec<RoleDefinitionConfig>,
    pub default_role: Option<String>,
}

Complete security configuration from fraiseql.toml

Fields

audit_logging: AuditLoggingConfig

Audit logging configuration

error_sanitization: ErrorSanitizationConfig

Error sanitization configuration

rate_limiting: RateLimitConfig

Rate limiting configuration

state_encryption: StateEncryptionConfig

State encryption configuration

constant_time: ConstantTimeConfig

Constant-time comparison configuration

role_definitions: Vec<RoleDefinitionConfig>

Field-level RBAC role definitions

default_role: Option<String>

Default role when user has no explicit role assignment

Implementations

impl SecurityConfig

pub fn validate(&self) -> Result<()>

Validate all security configurations

pub fn find_role(&self, name: &str) -> Option<&RoleDefinitionConfig>

Find a role definition by name Used in runtime field filtering (Cycle 5)

pub fn get_role_scopes(&self, role_name: &str) -> Vec<String>

Get all scopes for a role Used in runtime field filtering (Cycle 5)

pub fn to_json(&self) -> Value

Convert to JSON representation for schema.json

Trait Implementations

impl Clone for SecurityConfig

fn clone(&self) -> SecurityConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SecurityConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SecurityConfig

fn default() -> SecurityConfig

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for SecurityConfig

where SecurityConfig: Default,

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for SecurityConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.