Struct UnifiedAuthenticator 

pub struct UnifiedAuthenticator { /* private fields */ }

The master authenticator for irosh, implementing the unified security policy.

This authenticator governs all connection attempts (direct or via wormhole) and enforces a strict precedence:

1. Established trust (Vault) always wins.
2. Permanent Node Password challenges unknown keys.
3. Active Wormhole Temp Password (Invite Pattern) provides a one-time override.
4. Empty Vault + No Passwords allows TOFU.

Implementations

impl UnifiedAuthenticator

pub fn new( state: StateConfig, policy: HostKeyPolicy, authorized_keys: Vec<PublicKey>, _temp_password_hash: Option<String>, ) -> Self

Creates a new unified authenticator.

pub fn with_tracking( state: StateConfig, policy: HostKeyPolicy, authorized_keys: Vec<PublicKey>, _temp_password_hash: Option<String>, monitor: PairingMonitor, ) -> Self

Creates a new unified authenticator that shares its success and failure tracking with an external monitor (used by the Server for wormhole auto-burn).

pub fn was_successful(&self) -> bool

Returns the success flag, which is set to true when a NEW device is successfully added to the vault.

pub fn failed_attempts(&self) -> u32

Returns the number of failed password attempts.

Trait Implementations

impl Authenticator for UnifiedAuthenticator

fn supported_methods(&self) -> Vec<AuthMethod>

Returns which auth methods this backend supports.

fn check_public_key(&self, _user: &str, key: &PublicKey) -> Result<bool>

Validate a public key for the given user.

fn check_password(&self, _user: &str, password: &str) -> Result<bool>

Validate a username + password combination.

impl Debug for UnifiedAuthenticator

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.