Struct GatewayKeys 

pub struct GatewayKeys { /* private fields */ }

Loaded, lookup-ready key set. One instance per proxy process, loaded at startup (key rotation = redeploy/restart, the standard secret-mount flow).

Implementations

impl GatewayKeys

pub fn default_path() -> PathBuf

Resolve the keys file path: LEAN_CTX_GATEWAY_KEYS env wins, else <config_dir>/gateway-keys.toml (next to config.toml).

pub fn load_default() -> Result<Self>

Load from the default path; a missing file is an empty key set (the common local case), a malformed file is a loud startup error.

pub fn load(path: &Path) -> Result<Self>

pub fn parse(raw: &str, origin: &Path) -> Result<Self>

Parses a key-file body without touching disk. origin is only used in error messages. Callers that assemble a file body by hand validate it through this BEFORE the atomic write, so an invalid assembly can never replace a good file on disk (#716).

pub fn is_empty(&self) -> bool

pub fn len(&self) -> usize

pub fn lookup(&self, bearer_key: &str) -> Option<GatewayTags>

Authenticate a bearer key: SHA-256 it and look the hash up. Returns the identity tags on a match.

Trait Implementations

impl Debug for GatewayKeys

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for GatewayKeys

fn default() -> GatewayKeys

Returns the “default value” for a type.