Struct TokenPolicy 

pub struct TokenPolicy { /* private fields */ }

A per-purpose lifetime ceiling (ADR 0014, issue #137).

The signer applies the policy at sign time: a requested exp beyond the ceiling is clamped down, and a missing exp gets the ceiling as a definite expiry. Only a purpose whose ceiling is None may mint a genuinely non-expiring token, and that must be a justified line in the policy table, never an omission by the caller.

Implementations

impl TokenPolicy

pub fn with_max(self, action: &str, secs: Option<i64>) -> Self

Overrides one action’s ceiling. Some(secs) bounds the action; None makes it explicitly non-expiring — a decision a venture must name on purpose, which is exactly the point of issue #137. A zero ceiling means the same as None (max_ttl_secs maps it), so the table always carries the decision, never an omission.

pub fn max_ttl_secs(&self, purpose: &str) -> Option<i64>

The ceiling for a purpose’s action part (the text after the first ., the whole string when there is none). None means an explicitly sanctioned non-expiring purpose.

pub fn effective_exp( &self, purpose: &str, requested: Option<u64>, now: u64, ) -> Option<u64>

The effective expiry: min(requested, now + ceiling), and now + ceiling when the caller supplied no expiry at all.

Trait Implementations

impl Clone for TokenPolicy

fn clone(&self) -> TokenPolicy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for TokenPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for TokenPolicy

fn default() -> Self

Returns the “default value” for a type.