Struct AuthSettings 

pub struct AuthSettings {
    pub jwt: JwtSettings,
    pub argon2_memory_kib: Option<u32>,
    pub argon2_iterations: Option<u32>,
    pub argon2_parallelism: Option<u32>,
    pub lockout_threshold: Option<u32>,
    pub lockout_duration_secs: Option<u64>,
    pub login_ip_limit: Option<u32>,
    pub login_ip_window_secs: Option<u64>,
    pub login_global_limit: Option<u32>,
    pub login_global_window_secs: Option<u64>,
    pub hash_wait_ms: Option<u64>,
    pub login_field: Option<LoginField>,
}

Authentication: JWT lifetimes, password hashing cost and account lockout. Every default matches what the framework already did, so an upgrade changes nothing on its own.

Fields

jwt: JwtSettings

JWT lifetimes. User-wired: only auth_routes::Config::with_jwt_settings reads it, which you call.

argon2_memory_kib: Option<u32>

Argon2id memory cost in KiB. Default 19456, about 19 MiB, which is the OWASP floor. Less memory means faster logins and weaker resistance to brute force. Stay at or above 15 MiB.

argon2_iterations: Option<u32>

Argon2id iteration count. Default 2, which OWASP pairs with 19456 KiB of memory.

argon2_parallelism: Option<u32>

Argon2id lanes. Default 1. On a busy server one lane is fastest overall, since extra lanes only move work between cores.

lockout_threshold: Option<u32>

Failed logins for one username, known or not, before it locks. Default 5.

lockout_duration_secs: Option<u64>

Lockout duration in seconds. Default 900 (15 min).

login_ip_limit: Option<u32>

Failed logins one client IP (IPv6: one /64) may make per window. Default 20.

login_ip_window_secs: Option<u64>

Per-IP window in seconds. Default 60.

login_global_limit: Option<u32>

Failed logins all clients together may make per window, for each login (admin, operator console, each tenant). Default 600.

login_global_window_secs: Option<u64>

Global window in seconds. Default 60.

hash_wait_ms: Option<u64>

How long a login waits for a password-hashing slot before it answers 503, in milliseconds. Default 5000.

login_field: Option<LoginField>

What tenant users sign in with: "username" (default) or "email" (needs the sso feature). Emails must be unique per tenant.

Trait Implementations

impl Clone for AuthSettings

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuthSettings

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for AuthSettings

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for AuthSettings

where AuthSettings: Default,

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for AuthSettings

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for AuthSettings