Struct AuthConfig 

pub struct AuthConfig { /* private fields */ }

Resolved API-key configuration: a map of sha256(key) hex → project id, plus whether the dev bypass is enabled.

Implementations

impl AuthConfig

pub fn from_env() -> Self

Build from environment with a secure default (dev bypass off):

• TRACE_WEFT_API_KEYS: comma-separated raw_key:project_id pairs.
• TRACE_WEFT_DEV_MODE=1/true (or 0/false): toggle the dev bypass.

With no keys and the bypass off, every request is rejected — use this for production deployments where unauthenticated access must be denied.

pub fn from_env_local_first() -> Self

Build from environment for local-first entry points (CLI/desktop).

Same env vars as [from_env], but when no keys are configured and the operator hasn’t explicitly set TRACE_WEFT_DEV_MODE, the dev bypass defaults on so the local UI works without keys. Configuring keys (or setting TRACE_WEFT_DEV_MODE=0) restores enforcement.

pub fn new( raw_keys: impl IntoIterator<Item = (String, String)>, dev_mode: bool, ) -> Self

Construct from raw (key, project_id) pairs, hashing each key. Raw keys are dropped after hashing.

pub fn authenticate(&self, headers: &HeaderMap) -> Option<Auth>

Resolve the Authorization: Bearer <key> header to a tenant. Returns None when no valid key is presented and the dev bypass is off — the caller should answer 401 in that case.

Trait Implementations

impl Clone for AuthConfig

fn clone(&self) -> AuthConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Default for AuthConfig

fn default() -> AuthConfig

Returns the “default value” for a type.