Struct AuditKey 

pub struct AuditKey {
    pub key_id: KeyId,
    pub key: [u8; 32],
    pub valid_from: DateTime<Utc>,
    pub valid_until: Option<DateTime<Utc>>,
    pub rotation_reason: RotationReason,
}

A persisted audit_key. Stored under audit_key:<key_id>. Manual std::fmt::Debug redacts the key material so a stray tracing::debug!(?key, …) never leaks it.

Fields

key_id: KeyId

key: [u8; 32]

32-byte HMAC-SHA256 key. Serialised as a JSON array of bytes; in production the surrounding keyspace handle should be configured with the workspace’s standard encryption-at-rest layer so the value never touches disk in the clear.

valid_from: DateTime<Utc>

valid_until: Option<DateTime<Utc>>

None for the currently-active key; populated on rotation.

rotation_reason: RotationReason

Trait Implementations

impl Clone for AuditKey

fn clone(&self) -> AuditKey

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuditKey

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for AuditKey

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for AuditKey

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.