Struct A2aServerConfig 

pub struct A2aServerConfig {

    pub enabled: bool,
    pub host: String,
    pub port: u16,
    pub public_url: String,
    pub auth_token: Option<String>,
    pub rate_limit: u32,
    pub require_tls: bool,
    pub ssrf_protection: bool,
    pub max_body_size: usize,
    pub drain_timeout_ms: u64,
    pub require_auth: bool,
    pub ibct_keys: Vec<IbctKeyConfig>,
    pub ibct_signing_key_vault_ref: Option<String>,
    pub ibct_ttl_secs: u64,
}

Fields

enabled: bool

host: String

port: u16

public_url: String

auth_token: Option<String>

rate_limit: u32

require_tls: bool

ssrf_protection: bool

max_body_size: usize

drain_timeout_ms: u64

require_auth: bool

When true, all requests are rejected with 401 if no auth_token is configured. Default false for backward compatibility — existing deployments without a token continue to operate. Set to true in production when authentication is mandatory.

ibct_keys: Vec<IbctKeyConfig>

IBCT signing keys for per-task delegation scoping.

When non-empty, all A2A task requests must include a valid X-Zeph-IBCT header signed with one of these keys. Multiple keys allow key rotation without downtime.

ibct_signing_key_vault_ref: Option<String>

Vault key name to resolve the primary IBCT signing key at startup (MF-3 fix).

When set, the vault key is resolved at startup and used to construct an IbctKey with key_id = "primary". Takes precedence over ibct_keys[0] if both are set. Example: "ZEPH_A2A_IBCT_KEY".

ibct_ttl_secs: u64

TTL (seconds) for issued IBCT tokens. Default: 300 (5 minutes).

Trait Implementations

impl Debug for A2aServerConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Default for A2aServerConfig

fn default() -> A2aServerConfig

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for A2aServerConfig

fn deserialize<__D>( __deserializer: __D, ) -> Result<A2aServerConfig, <__D as Deserializer<'de>>::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for A2aServerConfig

fn serialize<__S>( &self, __serializer: __S, ) -> Result<<__S as Serializer>::Ok, <__S as Serializer>::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.