Struct ApiKeyAuthenticator 

pub struct ApiKeyAuthenticator { /* private fields */ }

Authenticates requests via API key with constant-time comparison.

Uses ring::constant_time::verify_slices_are_equal to prevent timing side-channel attacks during key comparison.

Examples

use secure_identity::api_key::ApiKeyAuthenticator;
use security_core::types::ActorId;
use uuid::Uuid;

let authenticator = ApiKeyAuthenticator::new(
    "secret-api-key".to_string(),
    ActorId::from(Uuid::new_v4()),
    vec!["reader".to_string()],
);

Implementations

impl ApiKeyAuthenticator

pub fn new(expected_key: String, actor_id: ActorId, roles: Vec<String>) -> Self

Creates a new ApiKeyAuthenticator.

Arguments

• expected_key — The valid API key string.
• actor_id — The actor identity to return on successful authentication.
• roles — The roles assigned to this API key.

Trait Implementations

impl Authenticator for ApiKeyAuthenticator

async fn authenticate( &self, request: &AuthenticationRequest, ) -> Result<AuthenticatedIdentity, IdentityError>

Authenticates the given request and returns an security_core::identity::AuthenticatedIdentity on success.