Struct Sessions 

pub struct Sessions<'a> { /* private fields */ }

Session mode: the credentials the proxy accepts and where their taint is read.

Implementations

impl<'a> Sessions<'a>

pub fn new(credentials: Vec<Credential>, taint: &'a dyn TaintLookup) -> Self

Accept credentials; look each session’s taint up in taint.

pub fn issued(issued: &'a dyn Verify, taint: &'a dyn TaintLookup) -> Self

Accept the credentials issued verifies; look each session’s taint up in taint (the standalone proxy, ADR-044).

pub fn serving_without_credential(self) -> Self

Also serve requests that carry no credential, with no session: no taint applies to them, and they share one holder’s half of the connections. A wrong or malformed credential is still refused.

pub fn serves_without_credential(&self) -> bool

Whether a request without any credential is served.

pub fn verify<T: AsRef<[u8]>>(&self, headers: &[T]) -> Result<String, AuthError>

The session that headers (every Proxy-Authorization value of the request) authenticate. Every credential is compared in full, in time that does not depend on where a guess first differs.

pub fn taint(&self, session: &str) -> Result<Taint, String>

The taint of session, from the lookup.

pub fn taint_within( &self, session: &str, max_age: Duration, ) -> Result<Taint, String>

The taint of session as looked up at most max_age ago and with no event recorded since (TaintLookup::version), else looked up again; always looked up again while there is no version to compare. Each open connection of a session is checked against its taint every so often; this keeps that to one lookup per new event, at most one per max_age, for the whole session. A new connection uses Self::taint.

Trait Implementations

impl Debug for Sessions<'_>

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.