Struct PortableClaimsContext 

pub struct PortableClaimsContext<'a> {

    pub audience: &'a AudienceId,
    pub issuer: Principal,
    pub mechanism: PortableMechanism,
    pub key_binding_id: [u8; 32],
    pub grants: &'a [DelegatedRoleGrant],
    pub caller: Principal,
    pub now_ns: u64,
    pub authority_not_before_ns: u64,
    pub authority_expires_at_ns: u64,
    pub enrollment_expires_at_ns: u64,
    pub min_login_started_at_ns: u64,
    pub min_proof_issued_at_ns: u64,
    pub max_login_ttl_ns: u64,
    pub max_proof_ttl_ns: u64,
}

Protected runtime and active enrollment inputs, never inferred from claims. The host must select current, unrevoked authority under its transaction lock. Generation, login revocation, replay and atomic session writes remain host/ session-engine obligations; this context cannot attest its own provenance.

Fields

audience: &'a AudienceId

issuer: Principal

mechanism: PortableMechanism

key_binding_id: [u8; 32]

grants: &'a [DelegatedRoleGrant]

caller: Principal

Actual authenticated ingress sender, not an account subject or request field.

now_ns: u64

authority_not_before_ns: u64

authority_expires_at_ns: u64

enrollment_expires_at_ns: u64

min_login_started_at_ns: u64

Immutable login start floor, including the host’s qualified reset margin.

min_proof_issued_at_ns: u64

max_login_ttl_ns: u64

Positive host limits, capped at 86,400 and 60 seconds respectively.

max_proof_ttl_ns: u64

Implementations

impl PortableClaimsContext<'_>

pub fn advance_reset_floors( &mut self, clock_skew_ns: u64, ) -> Result<(), PortableClaimsError>

Advance both admission cutoffs after losing session/replay/revocation state. Uses this context’s trusted boot time and deployment-qualified skew bound; the host must reject unavailable/rolled-back clocks before calling this. Floors never decrease, and overflow leaves both unchanged. This only calculates policy: the host must retain these values atomically with state invalidation, authenticate fresh enrollment and fail closed until ready. Do not call per request or discard the resulting floors after startup.

Trait Implementations

impl<'a> Clone for PortableClaimsContext<'a>

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<'a> Copy for PortableClaimsContext<'a>

impl<'a> Debug for PortableClaimsContext<'a>

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.