Struct CachingInternalAuthenticator 

pub struct CachingInternalAuthenticator<A> { /* private fields */ }

Wraps an InternalAuthenticator with a short-lived cache of both successful and rejected validations.

Construct it around the concrete validator and hand the wrapper to the transport layer as the InternalAuthenticator:

use std::time::Duration;
use toolkit_security::{CachingInternalAuthenticator, InternalAuthNError, PlatformIdentity};

struct AlwaysOk;
impl toolkit_security::InternalAuthenticator for AlwaysOk {
    async fn authenticate(&self, token: &str) -> Result<PlatformIdentity, InternalAuthNError> {
        Ok(PlatformIdentity::Shared { name: token.to_owned() })
    }
}

let cached = CachingInternalAuthenticator::new(AlwaysOk, Duration::from_secs(30))?;

Implementations

impl<A> CachingInternalAuthenticator<A>

pub fn new(inner: A, ttl: Duration) -> Result<Self, InvalidCacheTtl>

Wrap inner, caching successful validations for up to ttl (clamped to the credential’s own expiry when it is a JWT) and rejections for a short fixed window.

Errors

Returns InvalidCacheTtl if ttl is zero or exceeds MAX_TOKEN_REVIEW_CACHE_TTL.

pub fn with_default_ttl(inner: A) -> Self

Wrap inner with the DEFAULT_TOKEN_REVIEW_CACHE_TTL.

pub fn with_authentication_timeout(self, timeout: Duration) -> Self

Override the deadline applied to the whole authenticate call (including the per-token lock wait), replacing DEFAULT_AUTHENTICATION_TIMEOUT.

Trait Implementations

impl<A> Debug for CachingInternalAuthenticator<A>

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<A: InternalAuthenticator> InternalAuthenticator for CachingInternalAuthenticator<A>

async fn authenticate( &self, token: &str, ) -> Result<PlatformIdentity, InternalAuthNError>

Authenticate the raw X-ToolKit-Internal-Token value and resolve the caller’s PlatformIdentity.