Struct UsersFile 

pub struct UsersFile {
    pub users: HashMap<String, UserEntry>,
    /* private fields */
}

A parsed users file mapping usernames to their authentication credentials.

Pre-builds internal lookup indices during construction so that key and fingerprint lookups are O(1) rather than linear scans.

The TOML file has the following format:

[users.alice]
authorized_keys = ["base64-encoded-x25519-pubkey"]
authorized_certs = ["sha256:hex-fingerprint"]

[users.bob]
authorized_keys = ["base64-encoded-pq-pubkey"]

Fields

users: HashMap<String, UserEntry>

Map of username to their authentication entry.

Implementations

impl UsersFile

pub fn load(path: &Path) -> Result<Self>

Loads and parses a users file from the given path.

Arguments

• path - path to the TOML users file

Errors

Returns AuthError::StoreUnavailable if the file cannot be read or parsed, or AuthError::InvalidUserStore if the file contains duplicate keys/fingerprints or invalid fingerprint formats.

pub fn parse(content: &str) -> Result<Self>

Parses a users file from a TOML string.

Arguments

• content - TOML content as a string

Errors

Returns AuthError::StoreUnavailable if the content cannot be parsed, or AuthError::InvalidUserStore if the content contains duplicate keys/fingerprints or invalid fingerprint formats.

pub fn find_user_by_noise_pubkey(&self, pubkey: &PublicKey) -> Option<&str>

Looks up a username by their Noise X25519 public key.

Arguments

• pubkey - the X25519 public key to search for

Returns

The username if found, or None if no user has this key authorized.

pub fn find_user_by_noise_pq_pubkey( &self, pq_pubkey: &PqPublicKey, ) -> Option<&str>

Looks up a username by their Noise hybrid PQ public key.

Arguments

• pq_pubkey - the PQ public key to search for

Returns

The username if found, or None if no user has this key authorized.

pub fn find_user_by_cert_fingerprint(&self, fingerprint: &str) -> Option<&str>

Looks up a username by a TLS certificate fingerprint.

Arguments

• fingerprint - the certificate fingerprint in sha256:<hex> format

Returns

The username if found, or None if no user has this fingerprint authorized.

pub fn collect_noise_public_keys(&self) -> HashSet<PublicKey>

Collects all authorized X25519 public keys from all users.

Keys that fail to decode (wrong length, invalid base64) are silently skipped.

Returns

A set of all valid X25519 public keys across all users.

pub fn collect_noise_pq_public_keys(&self) -> HashSet<PqPublicKey>

Collects all authorized hybrid PQ public keys from all users.

Returns

A set of all valid PQ public keys across all users.

pub fn collect_cert_fingerprints(&self) -> HashSet<String>

Collects all authorized certificate fingerprints from all users.

Returns

A set of all certificate fingerprints (in sha256:<hex> format) across all users.

Trait Implementations

impl Clone for UsersFile

fn clone(&self) -> UsersFile

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for UsersFile

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.