Struct SharedCredentialAttemptState 

pub struct SharedCredentialAttemptState { /* private fields */ }

Caller-owned concurrent lockout state for one credential lifecycle.

Cloned clients share this object by reference. Multiple attempts may begin on one open generation, but the first authentication rejection closes that generation for every later execution. Only replacement credentials or an explicit CredentialReconfirmation advance to a new open generation.

Implementations

impl SharedCredentialAttemptState

pub const fn new() -> Self

Creates one open initial credential generation.

pub fn observe(&self) -> (CredentialAttemptGeneration, CredentialAttemptStatus)

Returns the current generation and status.

pub fn begin(&self) -> Result<CredentialAttempt<'_>, CredentialAttemptError>

Begins execution only when the current generation remains open.

pub fn validate( &self, attempt: CredentialAttempt<'_>, ) -> Result<(), CredentialAttemptError>

Revalidates an attempt immediately before credential use.

pub fn reject( &self, attempt: CredentialAttempt<'_>, ) -> Result<(), CredentialAttemptError>

Closes the exact generation that received authentication rejection.

Repeated concurrent rejection reports for the same generation are idempotent. A stale report cannot close replacement credentials.

pub fn replace( &self, expected: CredentialAttemptGeneration, ) -> Result<CredentialAttemptGeneration, CredentialAttemptError>

Opens a new generation after replacement credentials were admitted.

pub fn reconfirm( &self, expected: CredentialAttemptGeneration, _acknowledgement: CredentialReconfirmation, ) -> Result<CredentialAttemptGeneration, CredentialAttemptError>

Opens a new generation after explicit unchanged-credential confirmation.

Trait Implementations

impl Debug for SharedCredentialAttemptState

fn fmt(&self, formatter: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SharedCredentialAttemptState

fn default() -> Self

Returns the “default value” for a type.