Struct SecuritySettings 

pub struct SecuritySettings {
    pub default_policy: Option<String>,
    pub rules: Vec<AuthorizationRule>,
    pub policies: Vec<AuthorizationPolicy>,
    pub field_auth: Vec<FieldAuthRule>,
    pub enterprise: EnterpriseSecurityConfig,
    pub error_sanitization: Option<ErrorSanitizationTomlConfig>,
    pub rate_limiting: Option<RateLimitingSecurityConfig>,
    pub state_encryption: Option<StateEncryptionConfig>,
    pub pkce: Option<PkceConfig>,
    pub api_keys: Option<ApiKeySecurityConfig>,
    pub token_revocation: Option<TokenRevocationSecurityConfig>,
    pub trusted_documents: Option<TrustedDocumentsConfig>,
}

Security configuration

Fields

default_policy: Option<String>

Default policy to apply if none specified

rules: Vec<AuthorizationRule>

Custom authorization rules

policies: Vec<AuthorizationPolicy>

Authorization policies

field_auth: Vec<FieldAuthRule>

Field-level authorization rules

enterprise: EnterpriseSecurityConfig

Enterprise security configuration (legacy flags)

error_sanitization: Option<ErrorSanitizationTomlConfig>

Error sanitization — controls what detail clients see in error responses

rate_limiting: Option<RateLimitingSecurityConfig>

Rate limiting — per-endpoint request caps

state_encryption: Option<StateEncryptionConfig>

State encryption — AEAD encryption for OAuth state and PKCE blobs

pkce: Option<PkceConfig>

PKCE — Proof Key for Code Exchange for OAuth Authorization Code flows

api_keys: Option<ApiKeySecurityConfig>

API key authentication — static or database-backed key-based auth

token_revocation: Option<TokenRevocationSecurityConfig>

Token revocation — reject JWTs by jti after revocation

trusted_documents: Option<TrustedDocumentsConfig>

Trusted documents — query allowlist (strict or permissive mode)

Trait Implementations

impl Clone for SecuritySettings

fn clone(&self) -> SecuritySettings

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SecuritySettings

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SecuritySettings

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for SecuritySettings

where SecuritySettings: Default,

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for SecuritySettings

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.