Struct AuthConfig 

pub struct AuthConfig {
    pub session_idle_timeout: Duration,
    pub session_absolute_timeout: Duration,
    pub remember_duration: Duration,
    pub max_failures: i64,
    pub failure_window: Duration,
}

Tunable auth policy. Loadable from a config section (all keys optional; an unset key keeps its default):

[auth]
session_idle_timeout_secs = 7200
session_absolute_timeout_secs = 43200
remember_duration_secs = 1209600
max_failures = 5
failure_window_secs = 900

Fields

session_idle_timeout: Duration

How long a session survives without a request. Activity past the halfway mark of this window pushes the deadline out again.

session_absolute_timeout: Duration

The ceiling a session cannot be renewed past, counted from login. Bounds how long a stolen token stays useful however busy the thief keeps it. session_ttl_secs is the former name of this key and still reads.

remember_duration: Duration

How long a “stay signed in” credential lasts. It survives the session ceiling: the point of it is to outlive the session and mint a new one.

max_failures: i64

Failed attempts within failure_window before a username is locked out.

failure_window: Duration

The window over which failed attempts are counted.

Trait Implementations

impl Clone for AuthConfig

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuthConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for AuthConfig

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for AuthConfig

where AuthConfig: Default,

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.