Struct SignedUrlConfig 

pub struct SignedUrlConfig {
    pub enabled: bool,
    pub secret: Option<String>,
    pub ttl_seconds: u64,
    pub query_param: String,
    pub require_nonce: bool,
    pub nonce_param: String,
    pub bind_client_ip: bool,
}

Signed URL configuration (DW-109, routes[].signed_url).

When enabled, the gateway verifies that each request to the route carries a valid HMAC-SHA256 signature in its query string. The signature is computed over the canonical request (method, path, expires timestamp) using the configured secret.

Fields

enabled: bool

Whether signed URL verification is enabled on this route.

secret: Option<String>

The HMAC secret (shared between the URL minter and the gateway). Must be non-empty when enabled is true. Stored as a plain string; in production, use a ${...} secret reference (DW-045) so the secret is not in the config file.

ttl_seconds: u64

The signature validity window in seconds. A URL minted at time T is valid until T + ttl_seconds. Must be > 0. Default: 300 (5 minutes).

query_param: String

The query parameter name carrying the hex-encoded signature. Must be non-empty. Default: sig.

require_nonce: bool

Require a one-time nonce (SEC-07, #211): when true, each signed URL must carry a nonce query parameter, and the verifier rejects replayed nonces within the validity window. Default: false (backward compatible).

nonce_param: String

The query parameter name carrying the one-time nonce. Must be non-empty when require_nonce is true. Default: nonce.

bind_client_ip: bool

Bind the signature to the client’s IP address (SEC-07, #211): when true, the canonical request includes the client IP as a fourth line, so a signed URL minted for one client cannot be replayed from a different IP. Default: false.

Trait Implementations

impl Clone for SignedUrlConfig

fn clone(&self) -> SignedUrlConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SignedUrlConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for SignedUrlConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl JsonSchema for SignedUrlConfig

fn schema_name() -> Cow<'static, str>

The name of the generated JSON Schema.

fn schema_id() -> Cow<'static, str>

Returns a string that uniquely identifies the schema produced by this type.

fn json_schema(generator: &mut SchemaGenerator) -> Schema

Generates a JSON Schema for this type.

fn inline_schema() -> bool

Whether JSON Schemas generated for this type should be included directly in parent schemas, rather than being re-used where possible using the $ref keyword.

impl PartialEq for SignedUrlConfig

fn eq(&self, other: &SignedUrlConfig) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for SignedUrlConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for SignedUrlConfig