Struct AuthConfig 

#[non_exhaustive]
pub struct AuthConfig {
    pub session_idle_timeout: Duration,
    pub session_absolute_timeout: Duration,
    pub remember_duration: Duration,
    pub max_failures: i64,
    pub max_failures_per_address: i64,
    pub failure_window: Duration,
    pub password_policy: PasswordPolicy,
}

Tunable auth policy. Loadable from a config section (all keys optional; an unset key keeps its default):

[auth]
session_idle_timeout_secs = 7200
session_absolute_timeout_secs = 43200
remember_duration_secs = 1209600
max_failures = 5
max_failures_per_address = 20
failure_window_secs = 900

[auth.password_policy]
min_length = 8

Fields (Non-exhaustive)

Non-exhaustive structs could have additional fields added in future. Therefore, non-exhaustive structs cannot be constructed in external crates using the traditional Struct { .. } syntax; cannot be matched against without a wildcard ..; and struct update syntax will not work.

session_idle_timeout: Duration

How long a session survives without a request. Activity past the halfway mark of this window pushes the deadline out again.

session_absolute_timeout: Duration

The ceiling a session cannot be renewed past, counted from login. Bounds how long a stolen token stays useful however busy the thief keeps it. session_ttl_secs is the former name of this key and still reads.

remember_duration: Duration

How long a “stay signed in” credential lasts. It survives the session ceiling: the point of it is to outlive the session and mint a new one.

max_failures: i64

Failed attempts within failure_window, for one username from one address, before that address is locked out of that username. Counted per address so a stranger cannot lock an operator out from elsewhere.

max_failures_per_address: i64

Failed attempts within failure_window from one address, whatever the usernames, before that address is locked out of signing in at all.

failure_window: Duration

The window over which failed attempts are counted.

password_policy: PasswordPolicy

What a new password must satisfy, wherever one is set.

Trait Implementations

impl Clone for AuthConfig

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuthConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for AuthConfig

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for AuthConfig

where AuthConfig: Default,

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.