Module handler 

Structs

ConnOpts

Options for a single connection, bundled to keep handle_connection’s argument list short.

Principal

An authenticated connection’s identity, carried alongside the session for later per-operation RBAC enforcement (Slice 3). For now it is bound at connect time and logged; it is not yet consulted per query.

Enums

AuthOutcome

Result of the connect-time authentication decision.

Functions

authenticate_connect

Pure, exhaustively-testable authentication decision for a CONNECT handshake.

handle_connection

new_rate_limiter

Create a new shared rate limiter.

Type Aliases

AuthRateLimiter

Tracks per-IP authentication failure counts for rate limiting.