Struct Policy 

pub struct Policy {
    pub free_failures: u32,
    pub window: Duration,
    pub first_lockout: Duration,
    pub max_lockout: Duration,
}

Fields

free_failures: u32

Failures allowed within window; the last of them starts the first lockout.

window: Duration

Failures are forgotten this long after the last one, or after the end of its lockout.

first_lockout: Duration

The first lockout; each further failure doubles it.

max_lockout: Duration

Implementations

impl Policy

pub const ENROLL: Policy

Host enrollment: 5 wrong codes per 10 minutes (kernel spec §4.1).

pub const LOGIN: Policy

Operator login and step-up: 5 wrong passwords per minute, then exponential backoff (kernel spec §3.2).

pub const PASSKEY_LOGIN: Policy

Passkey logins begun and not finished: 30 a minute, then the same backoff (plan 3c decision 8). A budget of its own, so a password lockout does not stop passkey login (3b-i’s obligation). Every start counts, and a page that offers passkeys on load starts one each time, hence more than a password’s five.

Trait Implementations

impl Clone for Policy

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for Policy

impl Debug for Policy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for Policy

impl PartialEq for Policy

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for Policy