Struct SecurityService 

pub struct SecurityService { /* private fields */ }

Security service combining all security components

Implementations

impl SecurityService

pub fn new(config: SecurityConfig) -> Self

Create a new security service

pub fn register_api_key(&self, key: &str, principal: Principal)

Register an API key

pub fn authenticate( &self, auth_header: Option<&str>, client_cert: Option<&str>, ) -> Result<Principal, AuthError>

Authenticate a request (returns principal if valid)

pub fn authorize( &self, principal: &Principal, required_capability: &Capability, ) -> Result<(), AuthError>

Authorize an action

pub fn check_rate_limit(&self, principal: &Principal) -> Result<(), AuthError>

Check rate limit

pub fn audit(&self) -> &AuditLogger

Get audit logger

pub fn full_check( &self, auth_header: Option<&str>, client_cert: Option<&str>, required_capability: &Capability, action: &str, resource: &str, request_id: &str, ) -> Result<Principal, AuthError>

Full security check (auth + authz + rate limit)