Struct KeyManager 

pub struct KeyManager { /* private fields */ }

API Key Manager for handling all key operations

Implementations

impl KeyManager

pub fn new<R: KeyRepository + 'static>(repository: R) -> Self

Create a new KeyManager with the given repository

pub fn with_arc_repository(repository: Arc<dyn KeyRepository>) -> Self

Create a new KeyManager with an Arc repository

pub fn with_hmac_secret(self, secret: Option<String>) -> Self

Set the HMAC secret for key hashing

pub async fn generate_key( &self, config: CreateKeyConfig, ) -> Result<(Uuid, String)>

Generate a new API key

Returns a tuple of (key_id, raw_key). The raw_key should be shown to the user only once and never stored. Only the hash is stored.

pub async fn validate_key(&self, raw_key: &str) -> Result<VerifyKeyResult>

Validate a raw API key

Returns verification result with key info if valid.

pub async fn revoke_key(&self, key_id: Uuid) -> Result<()>

Revoke an API key

pub async fn rotate_key(&self, key_id: Uuid) -> Result<(Uuid, String)>

Rotate an API key (generate new key, revoke old one)

Returns a tuple of (new_key_id, new_raw_key). The new_raw_key should be shown to the user only once.

pub async fn update_key( &self, key_id: Uuid, config: UpdateKeyConfig, ) -> Result<KeyInfo>

Update an API key’s configuration

pub async fn get_key(&self, key_id: Uuid) -> Result<Option<KeyInfo>>

Get key information by ID

pub async fn get_usage_stats(&self, key_id: Uuid) -> Result<KeyUsageStats>

Get key usage statistics

pub async fn record_usage( &self, key_id: Uuid, tokens: u64, cost: f64, ) -> Result<()>

Record usage for a key

pub async fn record_usage_record( &self, key_id: Uuid, record: UsageRecord, ) -> Result<()>

Record usage for a key from an explicit usage record. On Tokio, a write accepted on the first poll survives cancellation of its waiter. Other executors directly await the repository under the same capacity bound, preserving their existing execution and cancellation behavior. Capacity exhaustion and repository failures remain best-effort write errors; runtime shutdown does not provide durable retry.

pub async fn list_user_keys(&self, user_id: Uuid) -> Result<Vec<KeyInfo>>

List keys for a user

pub async fn list_team_keys(&self, team_id: Uuid) -> Result<Vec<KeyInfo>>

List keys for a team

pub async fn list_keys( &self, status: Option<KeyStatus>, limit: Option<usize>, offset: Option<usize>, ) -> Result<Vec<KeyInfo>>

List all keys with optional filtering

pub async fn delete_key(&self, key_id: Uuid) -> Result<()>

Delete a key permanently (use with caution)

pub async fn cleanup_expired_keys(&self) -> Result<u64>

Cleanup expired keys

pub async fn count_keys(&self, status: Option<KeyStatus>) -> Result<u64>

Count keys

Trait Implementations

impl Clone for KeyManager

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for KeyManager

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.