Expand description
Runtime-revocable and time-bounded capability tokens.
RuntimeCap<P> wraps a static Cap<P> with a shared
revocation flag. TimedCap<P> wraps a Cap<P> with an expiry deadline.
Unlike Cap<P>, neither type implements Has<P> — callers
must use try_cap() and handle the fallible result explicitly.
A Revoker handle is returned alongside each RuntimeCap and can be used
to invalidate the capability at any time from any thread.
Structs§
- Revoker
- A handle that can revoke its associated
RuntimeCap(and all clones). - Runtime
Cap - A revocable capability token proving the holder has permission
P. - Runtime
Send Cap - A thread-safe revocable capability token.
- Timed
Cap - A time-bounded capability token proving the holder has permission
P. - Timed
Send Cap - A thread-safe time-bounded capability token.