Expand description
Security configuration types for [security.*] and [auth] TOML sections.
Structs§
- ApiKey
Security Config - API key authentication configuration.
- Authorization
Policy - Authorization policy (RBAC/ABAC)
- Authorization
Rule - Authorization rule (custom expressions)
- Enterprise
Security Config - Enterprise security configuration
- Error
Sanitization Toml Config - Controls how much error detail is exposed to API clients. When enabled, internal error messages, SQL, and stack traces are stripped.
- Field
Auth Rule - Field-level authorization rule
- Oidc
Client Config - OAuth2 client configuration for server-side PKCE flows.
- Pkce
Config - PKCE (Proof Key for Code Exchange) configuration.
Requires
state_encryptionto be enabled for secure state storage. - Rate
Limiting Security Config - Per-endpoint and global rate limiting configuration for
[security.rate_limiting]. - Security
Settings - Security configuration
- State
Encryption Config - AEAD encryption for OAuth state parameter and PKCE code challenges.
- Static
ApiKey Entry - A single static API key entry.
- Token
Revocation Security Config - Token revocation configuration.
- Trusted
Documents Config - Trusted documents / query allowlist configuration.
Enums§
- Code
Challenge Method - PKCE code challenge method.
- Encryption
Algorithm - AEAD algorithm for OAuth state and PKCE state blobs.
- KeySource
- Where the encryption key is sourced from.
- Trusted
Document Mode - Trusted document mode.