Struct OpenAiKeyTable 

pub struct OpenAiKeyTable { /* private fields */ }

Thread-safe table of gateway API keys indexed by secret hash.

Keys are stored in a SIM table behind a shared mutex so the same table can be cloned across route state; an anonymous capability ceiling applies to requests that present no recognized key.

Implementations

impl OpenAiKeyTable

pub fn new() -> Result<Self>

Returns an empty key table with no anonymous capabilities.

pub fn with_anonymous(anonymous: CapabilitySet) -> Result<Self>

Returns an empty key table whose unauthenticated requests get anonymous.

pub fn add_secret( &self, secret: &str, capabilities: CapabilitySet, ) -> Result<OpenAiGatewayKey>

Hashes secret, registers it with capabilities, and returns the new key.

pub fn add_key(&self, key: OpenAiGatewayKey) -> Result<()>

Inserts an already-constructed key, indexing it by its secret hash.

pub fn key_for_secret(&self, secret: &str) -> Result<Option<OpenAiGatewayKey>>

Returns the registered key matching secret, or None if unknown.

pub fn key_for_request( &self, request: &GatewayRequest, ) -> Result<Option<OpenAiGatewayKey>>

Returns the key authenticating request, reading its bearer/api-key header.

pub fn list_keys(&self) -> Result<Vec<OpenAiGatewayKey>>

Returns all registered keys.

pub fn effective_capabilities( &self, request: &GatewayRequest, ) -> Result<CapabilitySet>

Returns the capabilities request may exercise.

The result is the key’s ceiling (or the anonymous ceiling when no key is presented), intersected with any capabilities the request body explicitly requests, so a request can only narrow – never widen – its key’s grant.

pub fn with_effective_capabilities<T>( &self, cx: &mut Cx, request: &GatewayRequest, f: impl FnOnce(&mut Cx) -> Result<T>, ) -> Result<T>

Runs f with cx scoped to the request’s effective capabilities.

Trait Implementations

impl Clone for OpenAiKeyTable

fn clone(&self) -> OpenAiKeyTable

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Default for OpenAiKeyTable

fn default() -> Self

Returns the “default value” for a type.