Struct TenantKeys 

pub struct TenantKeys { /* private fields */ }

Argon2id-hashed per-tenant API keys, keyed by tenant id.

A presented key has the form <tenant_id>.<secret>: the (non-secret) tenant id names which hash to check, so verification is O(1) — exactly one Argon2 verify — rather than one per tenant.

Debug deliberately redacts every hash — they are password-equivalent secrets — revealing only the configured tenant ids so a ProxyConfig dump can never leak credential material.

Implementations

impl TenantKeys

pub fn from_json(s: &str) -> Result<Self, AuthConfigError>

Parse from a JSON object { "<tenant_id>": "<argon2id-phc-hash>", ... }.

Every hash is validated up front so a malformed roster fails at startup rather than silently rejecting every request at runtime.

Errors

AuthConfigError::Json if the JSON is malformed; AuthConfigError::BadHash if any value is not a valid Argon2 PHC hash string.

pub fn is_empty(&self) -> bool

Whether any tenant keys are configured.

pub fn verify(&self, presented_key: &str) -> Option<TenantId>

Verify a presented <tenant_id>.<secret> key, returning the owning tenant on a match. The tenant id (before the first ., not itself secret) names which hash to check, so this does exactly one Argon2 verify — O(1), not O(tenants) — using the crate’s constant-time PasswordVerifier, never a plain ==.

An unknown tenant id (or a malformed key) still performs one Argon2 verify against a decoy hash, so an invalid key takes the same time whether or not the named tenant exists — this closes both the CPU-amplification DoS and the tenant-existence timing oracle. Tenant ids must not contain . (they are simple identifiers; the first . splits id from secret).

pub fn hash_key(secret: &str) -> Result<String, AuthConfigError>

Hash a fresh secret into a PHC-encoded Argon2id string for provisioning a tenant key. Operators store the returned hash; the plaintext key is shown to the tenant once and is never persisted here.

Errors

AuthConfigError::Hash if the Argon2 hasher fails.

Trait Implementations

impl Clone for TenantKeys

fn clone(&self) -> TenantKeys

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for TenantKeys

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for TenantKeys

fn default() -> TenantKeys

Returns the “default value” for a type.