Struct KeyRecord 

pub struct KeyRecord {
    pub id: String,
    pub name: String,
    pub hash: [u8; 32],
    pub created_at: i64,
    pub valid_after: Option<i64>,
    pub valid_before: Option<i64>,
    pub webhook_url: Option<String>,
}

An API authentication credential. Stored in three redb tables: keys_by_id, keys_by_hash (blake3 token hash → id), keys_by_name (name → id).

Fields

id: String

ULID — sortable, displayed in CLI output.

name: String

Operator-chosen human label. Unique per server.

hash: [u8; 32]

blake3 hash of the bearer token. The plaintext token is shown once and discarded.

created_at: i64

Unix seconds when the key was created.

valid_after: Option<i64>

Optional time-window start (unix seconds). None = no lower bound.

valid_before: Option<i64>

Optional time-window end (unix seconds). None = no upper bound.

webhook_url: Option<String>

Optional webhook URL fired on lifecycle events for secrets owned by this key.

Implementations

impl KeyRecord

pub fn is_active(&self, now: i64) -> bool

True when the key is within its validity window.

pub fn verify_token(&self, token: &[u8]) -> bool

Constant-time comparison: blake3-hash token and compare to stored hash.

Trait Implementations

impl Clone for KeyRecord

fn clone(&self) -> KeyRecord

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for KeyRecord

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for KeyRecord

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for KeyRecord

fn eq(&self, other: &KeyRecord) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for KeyRecord

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for KeyRecord