canic-core 0.104.2

Canic — a canister orchestration and management toolkit for the Internet Computer
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27

//! Module: model::auth::application_authorization
//!
//! Responsibility: own canonical local-application authorization values and bounds.
//! Does not own: stable encoding, state access, proof verification, or policy decisions.
//! Boundary: ops constructs these values; pure policy inspects their invariants.

mod authority;
mod scope;

pub use authority::{
    ApplicationAuthorityModelError, LocalApplicationAuthoritySnapshot, LocalApplicationSession,
    VerifiedApplicationAuthority,
};
pub use scope::{
    ApplicationScope, ApplicationScopeError, ApplicationScopeRef, CanonicalApplicationScopes,
};

pub const MAX_ACTIVE_APPLICATION_SESSIONS: usize = 2_048;
pub const MAX_ACTIVE_APPLICATION_SESSIONS_PER_SUBJECT: usize = 128;
pub const MAX_APPLICATION_PROOF_LIFETIME_NS: u64 = 60_000_000_000;
pub const MAX_APPLICATION_REPLAY_RECORDS: usize = 4_096;
pub const MAX_APPLICATION_REPLAY_RECORDS_PER_SUBJECT: usize = 256;
pub const MAX_APPLICATION_SCOPE_BYTES: usize = 64;
pub const MAX_APPLICATION_SESSION_SCOPE_BYTES: usize = 1_024;
pub const MAX_APPLICATION_SESSION_SCOPES: usize = 16;
pub const MAX_LOCAL_APPLICATION_SESSION_TTL_NS: u64 = 1_800_000_000_000;
pub const MAX_VERIFIED_APPLICATION_SCOPES: usize = 32;