Struct Token 

pub struct Token(/* private fields */);

A bearer token, as configured.

Deserialises from a plain string. It has no accessor: the only thing anything may do with a configured token is ask whether a presented one equals it, and that comparison lives here so it cannot be written a second, sloppier time somewhere else.

Implementations

impl Token

pub fn new(token: impl Into<String>) -> Self

A token from a string, for constructing a server in code.

pub fn len(&self) -> usize

The configured length, for the minimum-length refusal.

pub fn is_empty(&self) -> bool

Whether the token is empty — len() == 0, spelled for clippy.

pub fn matches(&self, presented: &str) -> bool

Whether presented is this token.

The byte comparison does not stop at the first difference, so the time it takes does not reveal how much of a guess was right. What it does still reveal is the length — a presented token of a different length is rejected after fewer XORs — and that is accepted deliberately: a token’s length is fixed by whoever issued it, is not the secret, and is bounded below by MIN_TOKEN_LEN anyway.

Trait Implementations

impl Clone for Token

fn clone(&self) -> Token

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Token

Redacted, and the mistake AGENTS.md names: a derived Debug over a credential is how three store crates shipped printing their tokens. Not even the length, which would narrow a guess for nothing in return.

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for Token

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.