Struct AuthStateTracker 

pub struct AuthStateTracker { /* private fields */ }

Tracks authentication state for membership certificates.

Implementations

impl AuthStateTracker

pub fn new(config: AuthConfig) -> Self

Create a new tracker with the given configuration.

pub fn config(&self) -> &AuthConfig

Get the current configuration.

pub fn check_state( &self, cert: &MembershipCertificate, now_ms: u64, ) -> CertificateState

Check the state of a certificate at the given time.

Timeline

├── T-0: Certificate issued
├── T-(auth_interval - warning_threshold): Warning state
├── T-auth_interval: Expiration (grace period starts)
├── T-(auth_interval + grace_period): Hard cutoff (Expired)
└── Re-auth succeeds: New cert, timer resets

pub fn needs_reauth(&self, cert: &MembershipCertificate, now_ms: u64) -> bool

Check if a certificate needs re-authentication.

Returns true if the certificate is in Warning or GracePeriod state.

pub fn is_operational(&self, cert: &MembershipCertificate, now_ms: u64) -> bool

Check if a certificate is still operational (allows mesh operations).

Returns true for Valid, Warning, and GracePeriod states.

pub fn is_expired(&self, cert: &MembershipCertificate, now_ms: u64) -> bool

Check if a certificate has fully expired (no grace period remaining).

pub fn reauth_deadline(&self, cert: &MembershipCertificate) -> u64

Calculate when re-authentication should begin (warning threshold).

pub fn hard_cutoff(&self, cert: &MembershipCertificate) -> u64

Calculate the hard cutoff time (grace period exhausted).

Trait Implementations

impl Clone for AuthStateTracker

fn clone(&self) -> AuthStateTracker

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuthStateTracker

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for AuthStateTracker

fn default() -> Self

Returns the “default value” for a type.