Struct AuthConfig 

pub struct AuthConfig {
    pub enabled: bool,
    pub api_key: Option<String>,
    pub jwt_secret: Option<String>,
    pub jwt_issuer: Option<String>,
    pub api_keys: Vec<ApiKeyEntry>,
}

Authentication configuration.

Optional authentication for the REST API and MCP server. When enabled is false (default), all requests are accepted.

RBAC roles (ordered by privilege):

• admin: full access including API key management and admin endpoints
• writer: read + write (ingest, learn, update, delete, GDPR)
• reader: read-only (search, augment, get, list, export)
• viewer: health + metrics only

Fields

enabled: bool

Enable authentication (default: false).

api_key: Option<String>

Legacy single API key for simple auth (checked via Authorization: Bearer <key> header). Set via TOML or UCOTRON_AUTH_API_KEY env var. When used alone (without api_keys), grants admin role.

jwt_secret: Option<String>

JWT secret for token-based auth (future use).

jwt_issuer: Option<String>

JWT issuer (future use).

api_keys: Vec<ApiKeyEntry>

Named API keys with role-based access control. Each key has a role and optional namespace scope.

Implementations

impl AuthConfig

pub fn authenticate( &self, bearer_token: &str, ) -> Option<(AuthRole, Option<String>)>

Look up an API key and return its role and namespace scope. Checks named api_keys first, then falls back to legacy api_key (admin role).

Trait Implementations

impl Clone for AuthConfig

fn clone(&self) -> AuthConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuthConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for AuthConfig

fn default() -> AuthConfig

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for AuthConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for AuthConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.