Struct SecurityConfig 

pub struct SecurityConfig {
    pub audit_logging: AuditLoggingConfig,
    pub error_sanitization: ErrorSanitizationConfig,
    pub rate_limiting: RateLimitConfig,
    pub state_encryption: StateEncryptionConfig,
    pub constant_time: ConstantTimeConfig,
    pub role_definitions: Vec<RoleDefinitionConfig>,
    pub default_role: Option<String>,
    pub multi_tenant: bool,
    pub rls: RlsConfig,
    pub service_accounts: HashMap<String, ServiceAccountConfig>,
}

Complete security configuration from fraiseql.toml

Fields

audit_logging: AuditLoggingConfig

Audit logging configuration

error_sanitization: ErrorSanitizationConfig

Error sanitization configuration

rate_limiting: RateLimitConfig

Rate limiting configuration

state_encryption: StateEncryptionConfig

State encryption configuration

constant_time: ConstantTimeConfig

Constant-time comparison configuration

role_definitions: Vec<RoleDefinitionConfig>

Field-level RBAC role definitions

default_role: Option<String>

Default role when user has no explicit role assignment

multi_tenant: bool

Declare that this schema serves multiple tenants (multi_tenant = true).

A non-none [fraiseql.tenancy] mode implies it. Activates the subscription tenant fail-closed gate and the cache+RLS boot gate — both of which named this key in their error messages while deny_unknown_fields made it a compile error to set (#758).

rls: RlsConfig

Declare that database Row-Level Security isolates this schema’s data ([fraiseql.security.rls] enabled = true). Verified against the live catalog at boot.

service_accounts: HashMap<String, ServiceAccountConfig>

Machine service accounts, keyed by account name (#983).

[fraiseql.security.service_accounts.reconciler]
secret_env = "FRAISEQL_SA_RECONCILER_SECRET"
roles      = ["reconciler"]
scopes     = ["write:Invoice"]

The server has consumed security.service_accounts since #977, but no authoring workflow could write it: only a hand-written schema.json could, so the feature was reachable only by accident. The secret is never inlined — secret_env names the environment variable holding it (ADR-0018).

Implementations

impl SecurityConfig

pub fn validate(&self) -> Result<()>

Validate all security configurations

Errors

Returns an error if any sub-configuration is invalid, if a role name is empty, or if a role definition contains no scopes.

pub fn to_json(&self) -> Value

Convert to JSON representation for schema.json.

Built by constructing the typed fraiseql_core::schema::SecurityConfig and serializing it (#977): the compiled seam is deny_unknown_fields, so a key this path emitted under a name the consumer does not declare would fail the compile instead of landing in a catch-all nothing reads. That catch-all is how this path shipped camelCase sections (auditLogging, constantTime with a misspelled applytoCsrfTokens) that no consumer read in any casing (#757, #893).

Mapping notes:

• [fraiseql.security.audit_logging] enabled lowers onto enterprise.audit_logging_enabled — the field the runtime actually reads. Its other keys (log_level, buffer_size, …) have no consumer anywhere and are not emitted.
• [fraiseql.security.error_sanitization] enabled lowers onto the compiled error_sanitization.enabled; its other keys (generic_messages, user_facing_format, …) likewise have no consumer and are not emitted.
• state_encryption lowers enabled + algorithm; key_rotation_enabled, nonce_size and key_size have no consumer (nonce/key sizes are fixed by the algorithm) and are not emitted.

Trait Implementations

impl Clone for SecurityConfig

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SecurityConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SecurityConfig

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for SecurityConfig

where SecurityConfig: Default,

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for SecurityConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.