Struct TenantStorage 

#[non_exhaustive]
pub struct TenantStorage { /* private fields */ }

Storage facade permanently bound to one authenticated tenant context.

Object keys are placed below tenants/<tenant_id>/; callers cannot escape that prefix through absolute paths, parent components, or backslashes. The tenant identifier itself must be exactly one normal path segment: object operations fail with StorageError::PathTraversal when it is empty, contains / or \, or consists only of dots. The wrapper provides namespace isolation, while membership authorization and backend bucket policy remain application and deployment responsibilities.

Implementations

impl TenantStorage

pub fn from_context(storage: Storage, context: &TenantContext) -> Self

Binds a storage engine to a tenant already validated by authentication.

pub fn tenant_id(&self) -> &str

Returns the authenticated tenant identifier bound to this instance.

pub fn object_key(&self, relative_path: &str) -> Result<String, StorageError>

Returns the backend object key confined below the tenant namespace.

pub async fn put( &self, relative_path: &str, bytes: &[u8], ) -> Result<(), StorageError>

Stores bytes below this instance’s immutable tenant prefix.

pub async fn get(&self, relative_path: &str) -> Result<Vec<u8>, StorageError>

Retrieves bytes only from this instance’s immutable tenant prefix.

pub fn url(&self, relative_path: &str) -> Result<String, StorageError>

Resolves a URL only after applying this instance’s tenant prefix.

Trait Implementations

impl Clone for TenantStorage

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for TenantStorage

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.