Struct HandoffTokenStore 

pub struct HandoffTokenStore { /* private fields */ }

Bounded one-time token store for future handoff verification.

Implementations

impl HandoffTokenStore

pub fn new() -> Self

Create an empty store with default bounds.

pub fn with_config(config: HandoffTokenStoreConfig) -> Self

Create an empty store with explicit bounds.

pub fn pending_len(&self) -> usize

Return the number of currently pending, non-pruned tokens.

pub fn issue(&mut self, now: Instant) -> Result<HandoffToken, HandoffTokenError>

Issue one pending token from operating-system randomness.

pub fn issue_with_random128<F>( &mut self, now: Instant, next_random128: F, ) -> Result<HandoffToken, HandoffTokenError>

where F: FnMut() -> Result<[u8; 16], HandoffTokenError>,

Issue one pending token from a deterministic random source.

Tests use this to force collisions and capacity pressure without weakening the production randomness path.

pub fn consume_matching( &mut self, expected: &HandoffToken, presented: &HandoffToken, now: Instant, ) -> Result<(), HandoffTokenError>

Consume expected exactly once if the backend presented the same token.

A mismatch never consumes either token. Expired tokens are removed before returning an expiry error so the pending set remains bounded.

pub fn revoke(&mut self, token: &HandoffToken) -> bool

Revoke one pending token without consuming it.

Returns true when the token was pending. The broker uses this when a handoff is abandoned (backend ACK deadline expired) so a late backend presentation of the token is rejected as not pending.

pub fn prune_expired(&mut self, now: Instant) -> usize

Drop every expired token and return how many entries were removed.

Trait Implementations

impl Debug for HandoffTokenStore

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for HandoffTokenStore

fn default() -> Self

Returns the “default value” for a type.