Struct KernelPublishTokens 

pub struct KernelPublishTokens { /* private fields */ }

Allowlist of bearer tokens permitted to call POST /kernels.

Internally stores the crate::rate_limit::TokenId of each allowlisted bearer (the xxhash64 digest used elsewhere for rate limiting), NOT the raw token string. Keeping TokenIds here means the value can flow through axum::Extension and tracing without risking the raw secret leaking into a span attribute or audit record, and allows() reduces to a hash-set lookup.

The list is empty by default — that is the safe posture: with no publish-scoped tokens configured, POST /kernels returns 403 kernel_publish_scope_required. Dev mode (empty TENSOR_WASM_API_TOKENS) is even stricter: the publish handler rejects outright with kernel_publish_disabled_in_dev_mode to deny the unauthenticated-attacker path the security review flagged.

Sourced from ENV_KERNEL_PUBLISH_TOKENS at server startup; tests drive it directly via KernelPublishTokens::from_tokens so they do not poison the process environment.

Implementations

impl KernelPublishTokens

pub fn from_env() -> Self

Parse the allowlist from ENV_KERNEL_PUBLISH_TOKENS. Splits on ,, trims surrounding whitespace, drops empty entries, hashes each remaining entry into a crate::rate_limit::TokenId. Unset / empty env var yields the empty allowlist — every POST /kernels is rejected with kernel_publish_scope_required.

pub fn from_raw(raw: &str) -> Self

Parse a comma-separated string as if it were the env variable. Public for the explicit-construction path used by tests.

pub fn from_tokens<I, S>(iter: I) -> Self

where I: IntoIterator<Item = S>, S: AsRef<str>,

Construct from an iterator of raw bearer-token strings. Used by integration tests that drive the publish-scope path directly.

pub fn is_empty(&self) -> bool

true when no entries are configured. With an empty allowlist the kernel-publish gate denies every POST /kernels — the safe default.

pub fn allows(&self, token_id: TokenId) -> bool

true when token_id is permitted to publish kernels.

Trait Implementations

impl Clone for KernelPublishTokens

fn clone(&self) -> KernelPublishTokens

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for KernelPublishTokens

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for KernelPublishTokens

fn default() -> KernelPublishTokens

Returns the “default value” for a type.