Struct AuthCache 

pub struct AuthCache { /* private fields */ }

Visible-collections cache. Thread-safe; cheaply cloneable through an enclosing Arc. Construction uses Default::default() so the cache can sit on AuthStore without extra plumbing.

Implementations

impl AuthCache

pub fn new(ttl: Duration) -> Self

pub fn get(&self, key: &ScopeKey) -> Option<HashSet<String>>

Look up the cached visible-collections set for (tenant, principal, role). Returns None on miss or when the entry has expired (the expired entry stays in place — the next insert overwrites it).

pub fn insert(&self, key: ScopeKey, collections: HashSet<String>)

Bookkeeping helper called by the runtime when it has to rebuild because get returned None. Counts the miss and inserts the freshly-computed set so the next caller hits the cache.

pub fn invalidate_all(&self)

Invalidate every entry — used after global IAM events (CREATE/DROP POLICY, DROP COLLECTION). Increments the invalidations counter once regardless of map size.

pub fn invalidate_tenant(&self, tenant: Option<&str>)

Invalidate every entry whose tenant matches tenant. Used by GRANT/REVOKE which know the affected tenant from the principal.

pub fn stats(&self) -> AuthCacheStats

Trait Implementations

impl Debug for AuthCache

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for AuthCache

fn default() -> AuthCache

Returns the “default value” for a type.