Struct ApiKeyAuthProvider 

pub struct ApiKeyAuthProvider { /* private fields */ }

API key authentication provider

Implementations

impl ApiKeyAuthProvider

pub fn new(keyring: HashMap<Key, String>) -> ApiKeyAuthProvider

Create a new API key authentication provider

Trait Implementations

impl AuthProvider for ApiKeyAuthProvider

fn validate_request<'life0, 'life1, 'async_trait>( &'life0 self, parts: &'life1 dyn RequestParts, ) -> Pin<Box<dyn Future<Output = Result<AuthContext, Error>> + Send + 'async_trait>>

where 'life0: 'async_trait, 'life1: 'async_trait, ApiKeyAuthProvider: 'async_trait,

Validate an API key request using constant-time comparison

This implementation protects against timing attacks by:

1. Comparing the provided token against ALL keys in the keyring
2. Using constant-time comparison from the subtle crate
3. Always iterating through all keys regardless of match status

This ensures the operation takes the same amount of time whether:

• The key is found early in the iteration
• The key is found late in the iteration
• The key is not found at all