Struct AuthConfig 

pub struct AuthConfig {
    pub enabled: bool,
    pub session_ttl_secs: u64,
    pub require_auth: bool,
    pub auto_encrypt_storage: bool,
    pub vault_enabled: bool,
    pub cert: CertAuthConfig,
    pub oauth: OAuthConfig,
}

Configuration knobs for the auth subsystem.

Fields

enabled: bool

Master switch – when false auth is completely bypassed.

session_ttl_secs: u64

Session time-to-live in seconds (default 3600 = 1 h).

require_auth: bool

When true, unauthenticated requests are rejected even for reads.

auto_encrypt_storage: bool

When true, storage files are encrypted when auth is active.

vault_enabled: bool

When true, auth state (users, api keys, bootstrap flag) is persisted to reserved vault pages inside the main .rdb database file using AES-256-GCM encryption. The encryption key is read from REDDB_VAULT_KEY env var or a passphrase.

cert: CertAuthConfig

Optional mTLS client-certificate auth policy (Phase 3.4 PG parity). Disabled by default; TLS listeners opt-in per config.

oauth: OAuthConfig

Optional OAuth/OIDC Bearer-token validator (Phase 3.4 PG parity). Disabled by default.

Trait Implementations

impl Clone for AuthConfig

fn clone(&self) -> AuthConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuthConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for AuthConfig

fn default() -> Self

Returns the “default value” for a type.