Struct SecurityConfig 

pub struct SecurityConfig {
    pub tls_cert: Option<PathBuf>,
    pub tls_key: Option<PathBuf>,
    pub client_ca: Option<PathBuf>,
    pub auth_mode: String,
    pub bearer_tokens: HashMap<String, String>,
    pub jwt_pubkey_der: Option<Vec<u8>>,
    pub jwt_expected_iss: Option<String>,
    pub sasl_users: HashMap<String, String>,
    pub topic_acl: HashMap<String, AclEntry>,
    pub topic_acl_default: Option<AclEntry>,
}

Raw config from YAML/CLI.

Fields

tls_cert: Option<PathBuf>

PEM cert path (--tls-cert).

tls_key: Option<PathBuf>

PEM key path (--tls-key).

client_ca: Option<PathBuf>

PEM CA bundle for mTLS client cert validation (--client-ca).

auth_mode: String

Auth mode string (none|bearer|jwt|mtls|sasl).

bearer_tokens: HashMap<String, String>

Bearer tokens as a map token → subject name.

jwt_pubkey_der: Option<Vec<u8>>

JWT RSA public key (PKCS#1 DER).

jwt_expected_iss: Option<String>

JWT expected iss claim.

sasl_users: HashMap<String, String>

SASL-PLAIN: user → password map (for AMQP/MQTT).

topic_acl: HashMap<String, AclEntry>

ACL per topic name.

topic_acl_default: Option<AclEntry>

ACL default entry for unknown topics. None = deny-by-default.

Trait Implementations

impl Clone for SecurityConfig

fn clone(&self) -> SecurityConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SecurityConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SecurityConfig

fn default() -> SecurityConfig

Returns the “default value” for a type.