Struct ApiKey 

pub struct ApiKey {
    pub id: String,
    pub user_id: String,
    pub name: String,
    pub prefix: String,
    pub secret_hash: String,
    pub scopes: Option<String>,
    pub expires_at: Option<u64>,
    pub last_used_at: Option<u64>,
    pub created_at: u64,
}

One stored API key. The secret_hash is what’s persisted; the plaintext secret is returned to the caller exactly once at create time (see ApiKeyStore::create).

Fields

id: String

Stable identifier — what the dashboard / management UI lists. Format: key_<24-char-base64url>. Distinct from prefix so a user can revoke by id without seeing the secret prefix.

user_id: String

User who owns this key. Auth context resolves to this user_id when the key authenticates.

name: String

Friendly name set by the owner. Free-form; UI-only.

prefix: String

First 16 chars of the FULL plaintext token (pk.key_<8 id chars>). Safe to display in management UIs since this prefix encodes only the key id, not any of the secret material — the secret starts AFTER the second . separator. Lets the user distinguish keys by sight without ever exposing the secret.

secret_hash: String

HMAC-SHA256 hash of the secret using a server-side pepper (PYLON_API_KEY_PEPPER, or a fixed dev pepper when unset). Verified at request time via constant-time compare.

Why HMAC-SHA256, not Argon2? Argon2 exists to slow brute force of LOW-entropy passwords. API key secrets are 32 random bytes (256 bits) — brute force is computationally infeasible regardless of hash speed. Using Argon2 here would add ~50ms of latency per request for zero security benefit. SHA-256 HMAC at ~1µs gives the same effective security plus 50000× throughput.

scopes: Option<String>

Comma-separated scope strings. Application-defined; pylon stores opaquely.

expires_at: Option<u64>

Unix timestamp at which this key stops being valid. None for no-expiry keys.

last_used_at: Option<u64>

Unix timestamp of the most recent successful auth — refreshed on every verify. None until the first use.

created_at: u64

Trait Implementations

impl Clone for ApiKey

fn clone(&self) -> ApiKey

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ApiKey

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for ApiKey

fn eq(&self, other: &ApiKey) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Eq for ApiKey

impl StructuralPartialEq for ApiKey