Struct PortableClaimsContext 

pub struct PortableClaimsContext<'a> {
    pub authority: PortableAuthority<'a>,
    pub min_proof_issued_at_ns: u64,
    pub max_login_ttl_ns: u64,
    pub max_proof_ttl_ns: u64,
}

Current authority plus fresh-proof admission constraints. Ordinary session authorization uses PortableAuthority without proof TTL or issuance inputs.

Fields

authority: PortableAuthority<'a>

min_proof_issued_at_ns: u64

max_login_ttl_ns: u64

Positive host limits, capped at 86,400 and 60 seconds respectively.

max_proof_ttl_ns: u64

Implementations

impl PortableClaimsContext<'_>

pub fn advance_reset_floors( &mut self, clock_skew_ns: u64, ) -> Result<(), PortableClaimsError>

Advance both admission cutoffs after losing session/replay/revocation state. Uses this context’s trusted boot time and deployment-qualified skew bound; the host must reject unavailable/rolled-back clocks before calling this. Floors never decrease, and overflow leaves both unchanged. This only calculates policy: the host must retain these values atomically with state invalidation, authenticate fresh enrollment and fail closed until ready. Do not call per request or discard the resulting floors after startup.

Trait Implementations

impl<'a> Clone for PortableClaimsContext<'a>

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<'a> Copy for PortableClaimsContext<'a>

impl<'a> Debug for PortableClaimsContext<'a>

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.