Module session_request 

Canonical session request identity, independent of proof verification or storage.

Hashing a request does not authenticate a token, select host TTL policy or grant scopes. Session admission and replay remain separate engine obligations.

Structs

SessionRequest

Canonical narrowing request: 1..=16 unique scopes, at most 1024 scope bytes. Input order is normalized before hashing; duplicates are rejected.

SessionTtlLimit

Checked current maximum session lifetime, in seconds (1..=1800). Authorization needs this bound, without an admission default. Construction cannot bypass range admission:

SessionTtlPolicy

Checked default and maximum TTL for fresh admission. Neither value is taken from a submitted request. Live authorization uses only maximum().

Enums

SessionRequestError

Request shape, narrowing and lifetime rejection; no cryptographic verification.