Struct SecurityManager 

pub struct SecurityManager {
    pub verifier: Arc<MessageVerifier>,
    pub encryption: Arc<ConditionalEncryption>,
    pub config: SecurityConfig,
}

Security manager that combines all security functionality

Fields

verifier: Arc<MessageVerifier>

Message verifier for signature verification

encryption: Arc<ConditionalEncryption>

Conditional encryption for data at rest

config: SecurityConfig

Security configuration

Implementations

impl SecurityManager

pub fn new(config: SecurityConfig) -> SecurityResult<Self>

Create a new security manager without persistence

pub async fn new_with_persistence( config: SecurityConfig, db_ops: Arc<DbOperationsV2>, ) -> SecurityResult<Self>

Create a new security manager with database persistence

pub async fn register_system_public_key( &self, request: KeyRegistrationRequest, ) -> SecurityResult<KeyRegistrationResponse>

Register the system-wide public key

pub fn verify_message( &self, signed_message: &SignedMessage, ) -> SecurityResult<VerificationResult>

Verify a signed message

pub fn verify_message_with_permissions( &self, signed_message: &SignedMessage, required_permissions: &[String], ) -> SecurityResult<VerificationResult>

Verify a message with required permissions

pub fn encrypt_data(&self, data: &[u8]) -> SecurityResult<Option<EncryptedData>>

Encrypt data if encryption is enabled

pub fn encrypt_json( &self, json_data: &Value, ) -> SecurityResult<Option<EncryptedData>>

Encrypt JSON data if encryption is enabled

pub fn decrypt_data( &self, encrypted_data: &EncryptedData, ) -> SecurityResult<Vec<u8>>

Decrypt data

pub fn decrypt_json( &self, encrypted_data: &EncryptedData, ) -> SecurityResult<Value>

Decrypt JSON data

pub fn is_encryption_enabled(&self) -> bool

Check if encryption is enabled

pub fn get_system_public_key(&self) -> SecurityResult<Option<PublicKeyInfo>>

Get the system public key if it exists.

pub async fn remove_system_public_key(&self) -> SecurityResult<()>

Remove the system public key