Struct AdminRateLimiter 

pub struct AdminRateLimiter { /* private fields */ }

Simple sliding-window rate limiter for admin API endpoints.

Without rate limiting, an attacker who compromises the admin API key can make unlimited requests, enabling rapid brute-force enumeration of agents/sessions and denial-of-service against the control plane.

This implements a global sliding window: it tracks timestamps of recent requests and rejects new ones when the window is full.

Implementations

impl AdminRateLimiter

pub fn new(max_requests: u64, window_duration: Duration) -> Self

Create a new rate limiter with the given capacity and window duration.

pub fn check_rate_limit(&self) -> bool

Check whether a request should be allowed.

Returns true if the request is within the rate limit, false if it should be rejected. Automatically evicts expired entries from the window.