Struct Hs256Config 

pub struct Hs256Config {
    pub secret_env: String,
    pub issuer: Option<String>,
    pub audience: Option<String>,
}

HS256 authentication configuration.

Loaded from the [auth_hs256] section of fraiseql.toml. Mutually exclusive with [auth] (OIDC).

Example (TOML)

[auth_hs256]
secret_env = "FRAISEQL_HS256_SECRET"
issuer = "my-test-suite"
audience = "my-api"

Fields

secret_env: String

Name of the environment variable holding the shared secret.

The secret itself is never stored in the config file. At server startup, the value of this environment variable is used as the HS256 signing key.

issuer: Option<String>

Expected iss claim (optional).

audience: Option<String>

Expected aud claim (optional).

Implementations

impl Hs256Config

pub fn load_secret(&self) -> Result<String, String>

Resolve the shared secret from the configured environment variable.

Errors

Returns an error string when the environment variable is unset or empty.

Trait Implementations

impl Clone for Hs256Config

fn clone(&self) -> Hs256Config

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Hs256Config

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for Hs256Config

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for Hs256Config

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.