Struct ApiKeyAuthLayer 

pub struct ApiKeyAuthLayer { /* private fields */ }

Tower Layer that enforces API key authentication on every non-OPTIONS request.

Wrap only the routes that need protection. Public routes (e.g. /pjs/health) should live in a separate router that is merged without this layer:

let protected = protected_routes().layer(ApiKeyAuthLayer::new(config));
let router = Router::new()
    .merge(public_routes())
    .merge(protected)
    .layer(apply_common_layers());

Authentication accepts tokens from two header sources (first match wins):

1. Authorization: Bearer <token>
2. X-PJS-API-Key: <token>

On failure the layer returns 401 Unauthorized with a JSON body {"error":"Unauthorized"}.

Implementations

impl ApiKeyAuthLayer

pub fn new(config: ApiKeyConfig) -> Self

Construct from a pre-built ApiKeyConfig.

Trait Implementations

impl Clone for ApiKeyAuthLayer

fn clone(&self) -> ApiKeyAuthLayer

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<S> Layer<S> for ApiKeyAuthLayer

type Service = ApiKeyAuthService<S>

The wrapped service

fn layer(&self, inner: S) -> Self::Service

Wrap the given service with the middleware, returning a new service that has been decorated with the middleware.