Struct NevisConfig 

pub struct NevisConfig {
    pub enabled: bool,
    pub instance_url: String,
    pub realm: String,
    pub client_id: String,
    pub client_secret: Option<String>,
    pub token_validation: String,
    pub jwks_url: Option<String>,
    pub role_mapping: Vec<NevisRoleMappingConfig>,
    pub require_mfa: bool,
    pub session_timeout_secs: u64,
}

Nevis IAM integration configuration.

When enabled is true, Construct validates incoming requests against a Nevis Security Suite instance and maps Nevis roles to tool/workspace permissions.

Fields

enabled: bool

Enable Nevis IAM integration. Defaults to false for backward compatibility.

instance_url: String

Base URL of the Nevis instance (e.g. https://nevis.example.com).

realm: String

Nevis realm to authenticate against.

client_id: String

OAuth2 client ID registered in Nevis.

client_secret: Option<String>

OAuth2 client secret. Encrypted via SecretStore when stored on disk.

token_validation: String

Token validation strategy: "local" (JWKS) or "remote" (introspection).

jwks_url: Option<String>

JWKS endpoint URL for local token validation.

role_mapping: Vec<NevisRoleMappingConfig>

Nevis role to Construct permission mappings.

require_mfa: bool

Require MFA verification for all Nevis-authenticated requests.

session_timeout_secs: u64

Session timeout in seconds.

Implementations

impl NevisConfig

pub fn validate(&self) -> Result<(), String>

Validate that required fields are present when Nevis is enabled.

Call at config load time to fail fast on invalid configuration rather than deferring errors to the first authentication request.

Trait Implementations

impl Clone for NevisConfig

fn clone(&self) -> NevisConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for NevisConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for NevisConfig

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for NevisConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl JsonSchema for NevisConfig

fn schema_name() -> Cow<'static, str>

The name of the generated JSON Schema.

fn schema_id() -> Cow<'static, str>

Returns a string that uniquely identifies the schema produced by this type.

fn json_schema(generator: &mut SchemaGenerator) -> Schema

Generates a JSON Schema for this type.

fn inline_schema() -> bool

Whether JSON Schemas generated for this type should be included directly in parent schemas, rather than being re-used where possible using the $ref keyword.

impl Serialize for NevisConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.