Struct PerCallerAuthorizer 

pub struct PerCallerAuthorizer { /* private fields */ }

Per-caller signing approval — the policy for #354. The first time a given peer process asks to sign, the injected approve function is consulted (e.g. a biometric / user prompt). Approved peers are pinned for the life of this authorizer (the unlock window), so the legitimate caller is not re-prompted on every signature, while a different process triggers a fresh approval.

Peers are keyed by (uid, pid). On platforms without a peer pid (macOS), pid is None, so callers collapse to per-uid; there the host’s approve function should apply a time-bucketed re-auth rather than pinning forever.

Usage:

let auth = PerCallerAuthorizer::new(|peer| prompt_biometric_for(peer));

Implementations

impl PerCallerAuthorizer

pub fn new( approve: impl Fn(&PeerIdentity) -> bool + Send + Sync + 'static, ) -> Self

Builds a per-caller authorizer that consults approve once per new peer and pins peers it approves.

Args:

• approve: called for a not-yet-approved peer; returning true pins it.

Trait Implementations

impl SignAuthorizer for PerCallerAuthorizer

fn authorize_sign(&self, peer: &PeerIdentity) -> bool

Returns true iff peer is allowed to obtain a signature now.